IOTA 1G & 10G

USER MANUAL
www.profitap.com

Congratulations, you have joined the elite.

If you have any questions, you can contact us through our website:www.profitap.com
or by email:support@profitap.com
For the latest documentation and software, visit our Resource Center:
https://www.profitap.com/resource-center/

TABLE OF CONTENTS
1. Product Overview

1

1.1 Hardware Overview
1.2 Specifications
1.3 Interfaces & LED Behavior

123

2. Getting Started

7

2.1 Deploying the IOTA
2.2 Powering the device
2.3 Access IOTA over network
2.4 IOTA ConfigurationSystem TimeSystem Network
Access / Internal Firewall
ZeroTier
System Control
3. Capture Guide
3.1 Capture Control
3.2 Interface Configuration
Port Control
Port Status
Capture Features
Firmware
3.3 Autonomous Capture
3.4 Data Vault
Captured Files
Import a PCAP-NG

79910
101111121213
13141415
161617181818

3.5 Data Management
Disk Usage
Schedule a Cleanup
Manual disk cleanup
4. Analysis Guide

19191920
21

4.1 Dashboard overview
4.2 Filters Tab
Main dashboard selection menu
Time range selection
Filtering traffic

2122222324Graphs
4.3 PCAP file download25265. License Information

27

6. Legal28

PRODUCT OVERVIEW
1.1 HARDWARE OVERVIEWIOTA is a multifunctional passive network probe with integrated traffic capture and analysis
capabilities. Designed as a secure and flexible analysis solution, IOTA is a great asset to get
access and visibility into industrial or enterprise level networks.
Profitap IOTA is used by network engineers and IT analysts to get a fast and clear overview
of the network traffic. This means a comprehensive analysis can be performed quickly,
helping engineers get to the root cause in a matter of clicks.
The device can be deployed as a dedicated probe, or programmed for autonomous analysis,
eliminating the need of an on-site network expert.
Currently, the lineup consists of the IOTA 1G, and IOTA 10G.

11.2 SPECIFICATIONSINLINE MODE

Yes

INLINE LATENCYIOTA 1G

1G: 400 ns — 100M: 660 ns — 10M: 6600 ns

IOTA 10G

500 nsINLINE JITTER

20 ns

DUAL SPAN INPUTS MODE

Yes

FAILSAFECAPTUREPERFORMANCEPACKET PROCESSORHARDWARETIMESTAMPING

IOTA 1GYes

IOTA 10GNo

IOTA 1G2 Gbps / 3.2 Mpps

IOTA 10G

3 Gbps / 5 Mpps

IOTA 1GYes, 2 Gbps / 3.2 Mpps

IOTA 10GYes, 20 Gbps / 32 Mpps

IOTA 1GYes: 8 ns, NTP synchronized

IOTA 10G

1G: 8 ns, NTP synchronized
10G: 6.4 ns, NTP synchronized

INTERNAL STORAGE

1 TB
12 VDC

12V MODELSPoE (management RJ45)

POWER INPUTS

24–48 VDC

24V MODELS
POWER CONSUMPTIONMANAGEMENT

PoE (management RJ45)

IOTA 1G

12 W

IOTA 10G

15 W
10/100/1000 EthernetInterfaces

2 x USB 3.0Services

HTTPS (server), UPnP/VPN21.3 INTERFACES & LED BEHAVIORIOTA 1G Interface
78 911011 1236.1

542
6.21, 234

Ethernet port A, B
START/STOP/RESET button
2 x USB 3.0 port type A

56.1
6.2
7, 8, 9, 10, 11, 12

RJ45 Management port (PoE)
12 VDC power input
24-48 VDC power input
Activity LEDs

IOTA 1G LED Behavior
LED NUMBER
LED 7
LED 10STATE

MEANINGON

The port is linked.

Blinking

The port is linked and has RX/TX activity(traffic is passing through).

ONIOTA 1G is operating at 10 Mbps speed.

Blinking

IOTA 1G is initializing.

ONIOTA 1G is operating at 100 Mbps speed.

Blinking

IOTA 1G firmware is corrupted.

LED 8LED 93

LED NUMBER
LED 8+LED 9STATE

MEANINGON

IOTA 1G is operating at 1 Gbps speed.

Blinking

The port is linked and has RX/TX activity(traffic is passing through).

Alternating Blinking

IOTA 1G cannot find a common speed
between the connected devices.

LED 11 STATE

LED 12 STATE

MEANING

Orange Blink

OFFBooting

GreenGreenRunningGreenGreen Blink

Capturing

Green

Orange Blink

Capturing / Warning

GreenRed

Disk Full

Orange Green blink

Orange Green Blink

Updating

Red Blink

Red Blink

Hardware Failure

Orange Blink

Orange Blink

Factory Reset

Green Blink

OFFShutting down

OFFOFF

Shutdown completed4IOTA 10G Interface
7 89 101211 12

3

6.1

54

6.2

1, 2 SFP/SFP+ port A and port B, accepting
both optical and copper connections.
3 START/STOP/RESET button
4 2 x USB 3.0 port type A

56.1
6.2
7, 8, 9, 10, 11, 12

RJ45 Management port (PoE)
12 VDC power input
24-48 VDC power input
Activity LEDs

IOTA 10G LED Behavior
LED COLOR

7+8 or 9+108 or 10

7+8+9+10

ORANGENO SFP MODULE
PRESENT OR DETECTED-ORANGESTEADY GREEN-

SPAN MODE, LINK UP

IN-LINE MODE, LINK UPSLOWBLINKINGGREENNO LINK-NO LINKFASTBLINKING
GREEN-SPAN MODE,
TRAFFIC ACTIVITY

IN-LINE MODE, TRAFFICACTIVITYRED

CONNECT ADDITIONAL
POWER-CONNECT ADDITIONAL
POWER

5LED 11 STATE

LED 12 STATE

MEANING

Orange BlinkOFF

Booting

Green

Green

Running

Green

Green Blink

Capturing

Green

Orange Blink

Capturing / Warning

GreenRed

Disk Full

Orange Green blink

Orange Green Blink

Updating

Red Blink

Red Blink

Hardware Failure

Orange Blink

Orange BlinkFactory Reset

Green BlinkOFF

Shutting down

OFFOFF

Shutdown completed6GETTING STARTED
2.1 DEPLOYING THE IOTA
IOTA 1G
Insert Ethernet cables of the line you want to monitor into the RJ45 port A and B of the IOTA,
using category 5 UTP cables, rated for Gigabit operations.

▶▶ Note: When deployed in-line, IOTA must always be connected to the network
first, before powering the device to make full use of the failsafe capabilities.
This step is critical to verify the availability of the inline path in case of failover.

7

IOTA 10G
Carefully insert both SFP modules, making sure the retention mechanism is closed.
Insert the LC optical fiber cables of the line you want to monitor in the SFP modules, making
sure to match the Tx-Rx / Tx-Rx signal direction at the other end.

▶▶ Note: IOTA 10G does not have an integrated failsafe circuit. Thus, to use thedevice in-line, an external TAP must be employed in order to implement failsafe
monitoring.

82.2 POWERING THE DEVICEConnect the 12V 2.5A DC power supply, or connect 24-48VDC input to power source,depending on your IOTA model. Alternatively, power the device over the management portwith PoE. The IOTA will boot automatically after power connection is established. You canfollow its status by observing the activity LEDs.

▶▶ Note: Initial boot may take some time to complete. When both the Status andCapture LEDs are green, IOTA has completed the boot sequence.

Once powered the in-line failover circuit is disabled, placing the device actively in-line.

2.3 ACCESS IOTA OVER NETWORKTo access the IOTA over the network, you can connect to the HTTP interface by browsing tothe device IP of your IOTA, including port number.
The full URL should be: https://x.x.x.x:3000
DHCP mode is enabled by default.
To login, use the following initial credentials:
Default name: admin
Default Password: admin

9▶▶ Note: In case your browser displays a ‘Your connection is not private’ warning,click on advanced > proceed to… URL at the bottom to proceed to the IOTA
login page.

2.4 IOTA CONFIGURATION
System TimeNTP service is enabled by default, if Internet access is provided to IOTA, no extraconfiguration is required. However, system time can manually be adjusted.
The system time is used by:◉◉ the embed OS,◉◉ the capture interface to constantly discipline the hardware timestamp counter.
Changing time may require a restart of the capture interface to take effect.

10

System Network
Navigate to IOTA Settings / Configuration to change default network settings like IP, Mask,
Gateway, DNS and Host Name.

Access / Internal Firewall
Used to limit access from local clients (LAN subnetwork) and/or remote clients (WAN,ZeroTier).

11

ZeroTier
ZeroTier provides an easy way to remotely access the device via a P2P VPN and manage
virtual networks on a cloud application. (more information: www.zerotier.com )System Control
Remotely restart or turn off your IOTA by pressing the ‘Restart’ or ‘Shutdown’ button.

12

CAPTURE GUIDE
3.1 CAPTURE CONTROLThe way IOTA captures network traffic can be controlled in Capture > Capture Control.
Thereare three main capture behaviors that can be distinguished:
1. Capture defined size and stop
2. Capture defined duration and stop
3. Capture continuously
The Capture Control menu gives you the following options to control the capture behavior:◉◉◉◉◉◉◉◉◉◉Keep captured raw data to be able to export PCAP later
Specify the number of files. 0 represents unlimited files.
Set file time length in seconds
Set Max file size in MB
Select folder where capture files will be placed▶▶ Note: Capture files are automatically analyzed and indexed. Once analyzed‘keep file’ option determines whether or not the trace file is conserved in thedata vault.
If ‘keep file’ is enabled , it’s possible to retrieve the trace file, a part of it
or a filtered copy of it from the dashboards. If ‘keep file’ is disabled , thedashboards displays indexed data only. It’s not possible to retrieve theoriginal trace file.

13

3.2 INTERFACE CONFIGURATIONThe Interface Configuration screen gives you an overview of connected devices, Capture
Statistics and Device information. To change interface settings, several tabs are available:
Port Control
If IOTA is intended to be used in-line, the suitable configuration must be set. ‘INLINE mode’ isthe default mode. However, it can be set to SPAN Mode by clicking the SPAN Mode checkbox
in Capture > Interface Configuration.
Also, you can set port speed and behaviour forboth network port A and B.

▶▶ Note: Any change in this panel immediately affects the network link.

14

Port Status
This tab provides you with an overview of the Link Partner Status and Fault Status for bothport A and B.

15

Capture Features

This tab allows the setting of the following capture features:◉◉ Enable timestamps in live capture◉◉ Keep CRC32◉◉ Disable Port A◉◉ Transmit CRC Errors◉◉ Package Slicing◉◉ Disable Port B
Features can be enabled by clicking the checkbox for each specific feature you want to use.
FirmwareIf you want to change the firmware of your IOTA, you can select a firmware version in thedrop-down menu and apply it by clicking the ‘Flash Firmware’ button.

16

3.3 AUTONOMOUS CAPTURE
To be able to capture traffic in networks where remote access over the network is notallowed or not possible, you can start IOTA’s autonomous capture feature by pressing thephysical START/STOP button.

START: Starts capture. IOTA will use latest settings in Capture Control
STOP: Stop CaptureRESET: Disconnect power from IOTA. Long-press the START/STOP button and while holding,reconnect power and hold for 20 seconds. RESET is complete when LEDs are green.

▶▶ Note: Make sure have applied the settings in Interface configuration before
you deploy the IOTA in the network you want to analyze.

173.4 DATA VAULT
Captured Files
Navigate to Data Vault > Captured Files to download the raw PCAP-NG file or multiple
selected files from a list. The entire file or group of files is downloaded in a .zip archive.

Import a PCAP-NG
If you have a PCAP-NG or PCAP file that is not directly captured to the internal disk of theIOTA, click the ‘select a file’ button to upload the new capture file to the IOTA. Once uploaded,make sure to set the time range of the dashboards to that of the file you uploaded, to ensure
the graphs display the correct data.

18

3.5 DATA MANAGEMENTDisk Usage
Navigate to Data Management > Capture Machine to get an overview of the disk usage,
including total disk size and available disk space.

A good practice is to check every once in a while the amount of free storage left and makean assessment on whether a cleanup is in order or not, as there are limitations for capturing and indexing related to the available space:◉◉ New captures can only start if at least 5% of disk space is available.
◉◉ Database indexing can only start if at least 10% of disk space is available. If alreadyrunning, indexing will stop if less than 10% of disk space remains available.

Schedule a Cleanup
Data retention management is available at Data Management > Capture Machine >Schedule a Cleanup. Capture files and index older than specified time range will bedeleted regularly.

19

Manual disk Cleanup
Manual cleanup of capture files and index is possible with the following options:◉◉ Selective cleanup based on time◉◉ Selective cleanup based on index◉◉ Cleanup index or PCAP files or both

20

ANALYSIS GUIDE
4.1 DASHBOARD OVERVIEW
12
1.
2.
3.
4.
5.
6.
7.
8.
9.

3

6

95
Main menu
LogoutMain dashboard selection
Time range selection
Dashboard area
Display filter
PCAP file download
Dashboard navigation with filters and time selection
Dashboard configuration
21478

4.2 BASIC NAVIGATION
Main dashboard selection menu
This menu displays all the available dashboards, the list of dashboards is non-exhaustive
and will change over time to include new features and other improvements.

▶▶ Note: Accessing a dashboard from this menu resets the Time pickers time
range and the Display filter defined in the current dashboard. To navigate
through dashboard keeping time range and filters use the ‘Goto >>’dashboard navigation.

22

Time range selection
Time range and automatic refresh rate can be set from this menu.

23

Filtering trafficDisplay filters can be manually defined by clicking the + icon next to the Filter box (top left)
and selecting the filter type and value it needs to filter on.

Alternatively, in the dashboards, filters can be applied quickly by using the + magnifier(include filter), or the - magnifier (exclude filter)

Filters can be removed by clicking the filter type again and selecting ‘--remove filter--’.

24

Graphs
Use the mouse to click-and-drag to zoom in on a specific time range.

Use Ctrl/CMD + mouse drag to add annotations to the graph.

25

4.3 PCAP FILE DOWNLOAD
Use the Get Pcapng button in the top right corner of eachdashboard to download the file.
The time range of the downloaded PCAP file corresponds with thetime range selected in the Time picker menu.
Optionally, filters can be defined. Available filters applied to PCAP-NG files are:◉◉ IP address◉◉ MAC address◉◉ VLAN ID◉◉ Protocol◉◉ PortIf a MAC,IP or a port is selected, the filter applies on both source and destination.
Alternative methods to download PCAP files are:
1 - Use the direct download link.
Clicking on any link starts the PCAP file transfer, filtered with value only. Filters are ignoredwith this method.

26

2 - Download the raw PCAP-NG file or multiple files from a list
(Data Vault > Captured Files)
The entire file or group of file is downloaded in a .zip archive.

LICENSE INFORMATION
Under Data Management > My License you can activate or deactivate your IOTA licenseand current status and version.

27

LegalDISCLAIMER
The manufacturer makes no representations or warranties with respect to the contents
hereof and specifically disclaims any implied warranties of merchantability or fitness forany particular purpose. The manufacturer reserves the right to revise this publication andto make changes in the content thereof without obligation of the manufacturer to notify any
person of such revision or changes.
COPYRIGHT
This publication, including all photographs and illustrations, is protectedunder international copyright laws, with all rights reserved. Neither thismanual, nor any of the material contained herein, may be reproduced without writtenconsent of the author.
TRADEMARKSThe trademarks mentioned in this manual are the sole property of their owners.

28

IT ALL STARTS
WITH VISIBILITY

PROFITAP HQ B.V. — High Tech Campus 95656 AE Eindhoven — The Netherlands

sales@profitap.com
www.profitap.com© 2019 Profitap — v1.6-08