10.03.2013 Views

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

EARLY FIELD TRIAL Chapter 8<br />

Table 8-8. Display Setup Options<br />

Display Setup > General Options<br />

192 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />

Display Setup Tab Settings for...<br />

Decode Font Click here to change font type, style, and<br />

size for the text in the Decode display.<br />

Packet Selection Click here to specify whether or not you<br />

would like a new tab created when you are<br />

filtering in the Decode > Summary pane<br />

(Decode tab) or mark the selected packets<br />

in the Decode > Summary pane. See<br />

Display Setup > Packet Selection Options<br />

on page 195.<br />

The Display > Display Setup > General tab contains options that can<br />

improve decode performance when working with large buffers or trace<br />

files.<br />

In previous releases, when decoding a trace file or buffer, protocol<br />

interpreters would start by performing a prescan of the entire trace or<br />

buffer. For large trace files and buffers, this process could take a long<br />

time.<br />

To address this issue, <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong> provides the<br />

option of a windowed approach. Using the windowed approach, <strong>Sniffer</strong><br />

<strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong> starts by prescanning a user-specified<br />

portion of the trace file or buffer. When moving from window to window<br />

within the buffer or trace file, the previous prescanned information will<br />

be cleared from memory so the new window can be scanned. This way,<br />

decoded information is available more quickly.<br />

You specify both whether to use the windowed approach and the size of<br />

the window to be used in the Display > Display Setup > General tab.<br />

Set the reassembly options as follows:<br />

Reassemble entire trace file— Enable this option if you would<br />

like to reassemble the entire trace file or buffer before displaying<br />

decoded data. Disable this option if you would like to reassemble<br />

the trace file in “chunks.”<br />

Reassembly window size — Use this option to specify the size<br />

(in terms of the number of frames) of the “chunk” to be<br />

reassembled and displayed. As you move between chunks, one<br />

chunk is cleared out and scan another is scanned.<br />

The default and minimum value for the Reassembly window size<br />

is 5000. This value is configurable, but it is recommended that you<br />

edit this value only if it is absolutely necessary.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!