User guide

2. Click Data Log Session Files in the top navigation bar. The Data Log Session Files
window will open.
You may dynamically archive or delete data log files from this window; see
Dynamically archiving and deleting data log files on page 217.
3. To view a file’s content, click on the file name. See Displaying data log file content on
page 219 below.
Displaying data log file content
When you click on a file name in a Data Log Session Files window, the file is transferred to
the browser. It will be opened as a text file, using the default text viewer on the DSView
software client’s computer.
Before the file is transferred to the browser, the DSView software will verify the file’s digital
signature. If the computed digital signature does not match the actual file’s digital signature,
the content of the file will be preceded with a warning, indicating that digital signature
verification failed and the file content may have been altered.
If you select a log file that does not reside on the DSView server to which you’re logged in,
the log file is transferred from the appropriate server.
You may also validate the signature of data log files by exporting the system certificate; see
System certificate and SSH key on page 51 and Verifying data log file digital signatures on
page 219.
Verifying data log file digital signatures
The DSView software computes hashes for data log files using the SHA1 digest algorithm.
After a hash is computed for a file, it is signed using the RSA public key algorithm and the
DSView software X.509 system certificate private key.
To verify the signature, you may use standard tools (such as OpenSSL) and the DSView
software system X.509 certificate public key. (To view or export the system certificate, see
System certificate and SSH key on page 51.)
For example, assume the following:
• A data log file is created with the name cisco-router-session-2006-04-02-12:12:01.txt.
• The DSView software signs the data log file and creates a signature file with the name
cisco-router-session-2006-04-02-12:12:01.sig.
• The DSView software system certificate has been exported with the name sun-jdoe.p10.
The OpenSSL command to verify the signature (and a successful response) is:
Chapter 13: Data Logging 219