This adapter uses the WinPcap libraries for Windows to tap into the IP packet stream. Before using this adapter with real-time data, you must install and configure these libraries on the system that will host the adapter.
Download and install the latest WinPcap MSI from http://www.winpcap.org. Use all the default settings for the installation. This adapter is not supported on macOS or Linux.
The TIBCO StreamBase® Input Adapter for IP/IRC reads Internet Protocol packets, either from the IP stack of a running system or from an archived capture file, and emits a tuple for each IRC chat message found in the TCP data stream. Dedicated tuple fields hold the source and destination addresses and ports, the IRC message type (NICK, USER, MODE, JOIN, PRIVMSG, QUIT and LIST), and the body of the message. When reading IP traffic on a running system, a filter string can be configured to limit the IP traffic being read.
|Data Source||Select Realtime Data or Capture File to read IRC traffic from the IP stack of a running system or from an archived capture file, respectively.|
|Capture File Name||The fully-qualified name of the capture file holding the IP packets to process. The capture file must be in a WinPcap-compatibile
format. The property is ignored when Data Source is set to
|TCP Port Number||The well-known TCP port number of the IRC server, which defaults to 194.|
|Capture Filter String||A lWinPcap-compatible filter string that can be used to limit the IP traffic being read.|
|Log Level||Controls the level of verbosity the adapter uses to send notifications to the console. This setting can be higher than the containing application's log level. If set lower, the system log level is used. Available values, in increasing order of verbosity, are: OFF, ERROR, WARN, INFO, DEBUG, TRACE.|
|Schema (schema)||The schema to output, including the following fields, which the adapter automatically creates. The user can override the length
of any string field by adding that field in Studio's Edit Schema tab:
Schema fields entered in Studio's Edit Schema tab not listed above, or of type other than string and blob, cause a typecheck error to be thrown.
A tuple is emitted only when a complete chat message is detected in the TCP stream. If one or more IP packets are missing such that the TCP stream cannot be reconstructed, no tuple will be emitted for the corresponding chat message.
When suspended, the adapter stops processing IP packets. Note that doing so may cause the WinPcap libraries to discard IP packets, resulting in lost tuples when the adapter is eventually resumed.