10.03.2013 Views

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

EARLY FIELD TRIAL<br />

Reusable Filters with Multiple Filter Points<br />

Using Filters in the Quick Select Window<br />

Once you have created a filter from the Quick Select window, you can<br />

use (and reuse) it as a Mining filter, Source filter, Display filter, or<br />

Statistics filter. Table 6-1 summarizes the differences between each of<br />

these filter points. Figure 6-2 illustrates the Source, Mining, and<br />

Statistics filter points; refer to Applying <strong>Adaptive</strong> Display Filters on page<br />

136 for information on using Quick Select filters as Display filters with<br />

<strong>Adaptive</strong> Session/Packet data.<br />

Table 6-1. Quick Select Window Filters<br />

Filter Type & Description How Applied? <strong>Mode</strong>?<br />

Source Filters<br />

Source Filters are applied at the network interface.<br />

They exclude packets matching specified criteria<br />

from monitoring or capture:<br />

• Monitor statistics in the Quick Select window<br />

will not include packets excluded by a source<br />

filter. This includes both the Graph panel and all<br />

Statistics panel tabs.<br />

• Postcapture analysis will not include packets<br />

excluded by a source filter. This includes both<br />

<strong>Adaptive</strong> and raw packet postcapture views.<br />

Note: Because source filters prevent matching<br />

packets from ever being seen by <strong>Sniffer</strong> <strong>Adaptive</strong><br />

<strong>Application</strong> <strong>Analyzer</strong>, you should apply them<br />

carefully.<br />

Mining Filters<br />

Mining filters are applied when you click the Mine<br />

button to retrieve stored packet data (ASPs or raw<br />

packets) from the capture buffer. They are used to<br />

focus postcapture analysis on packet data matching<br />

specified criteria.<br />

Right-click a stream in the<br />

Navigation panel, choose Apply<br />

Source Filter, and select the<br />

filter to use as a source filter.<br />

Once you’ve applied a source<br />

filter to a stream, its entry in the<br />

Navigation panel appears with a<br />

distinctive icon when selected.<br />

Select a filter from the Mining<br />

Filtering dropdown at the base<br />

of the Quick Select window<br />

before clicking the Mine button.<br />

Alternatively, you can use the<br />

Edit Filter button in the<br />

Summary dialog box that<br />

appears after clicking Mine.<br />

<strong>Adaptive</strong><br />

and Raw<br />

<strong>Adaptive</strong><br />

and Raw<br />

User’s Guide 121

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!