Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

EARLY FIELD TRIAL
Applying Mining Filters
Using Filters in the Quick Select Window
Use the Mining Filtering controls at the base of the Quick Select
window to select an existing filter for use as a Mining filter. Mining filters
are used to retrieve a specific set of packets (Adaptive Session Packets
or raw packets) from the time selection in the Graph panel. Mining filters
are applied when you click the Mine button.
NOTE: Refer to Figure 6-2 on page 123 for a summary of where the
different filter types are applied.
Figure 6-6. Mining Filtering
The dropdown lists all filters created using the Create/Edit Filters
dialog box. You can select an existing Mining Filter from the
dropdown list.
Select (None) to disable filtering and return all of the packets
within your time selection.
Click Edit to change the settings for the currently selected filter. If
the dropdown is set to (None), this button reads Create; click it
to start the filter creation process.
Using the Frame Slice Option – Raw Packet Capture Only
Frame Slicing is a performance optimization tool that truncates each
frame to a specified length during mining. This option can be used when
capturing in raw packet mode to limit mined packets to headers and
some portion of the payload.
IMPORTANT: This option is not supported when capturing in Adaptive
mode. Sniffer Adaptive processing already intelligently condenses packet
contents to just those details necessary for analysis. Slicing doesn’t
make sense in this context.
When capturing in raw packet mode, frame slicing can decrease the time
it takes to return a mining request and the size of a trace file, however
it can also limit analysis capabilities. The Expert analyzer uses a best
effort approach in its analysis of sliced frames based on the specified
packet length.
User’s Guide 133