Xplico as network decoder is designed to be used either stand-alone or within architecture. The main characteristics of the decoder are its high modularity, scalability and configurability.
The decoder has been designed so that the decoding of the protocol had to be disconnected from the formatting of data (raw) input, and also the format used for data output (reconstruction).
The flow of data and information in the Xplico are represented in the figure.
The raw data are read (or come) from (to) “capture dissector” block, after which they are sent to the protocol dissectors blocks and finally the data reconstructed and normalized is provided to dispatcher block.
The dispatcher will reorganize the data or send it to another application (manipulator) as needed.
Therefore Xplico is composed of three types of modules:
The following figure represents the modular structure of Xplico, where the core is the substrate where the modules are interconnected.
The configuration of these modules is done with the configuration file. Therefore, selecting and / or creating correctly capture-module and the dispatcher Xplico can use in various contexts.