Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
EARLY FIELD TRIAL Chapter 8<br />
Table 8-8. Display Setup Options<br />
Display Setup > General Options<br />
192 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
Display Setup Tab Settings for...<br />
Decode Font Click here to change font type, style, and<br />
size for the text in the Decode display.<br />
Packet Selection Click here to specify whether or not you<br />
would like a new tab created when you are<br />
filtering in the Decode > Summary pane<br />
(Decode tab) or mark the selected packets<br />
in the Decode > Summary pane. See<br />
Display Setup > Packet Selection Options<br />
on page 195.<br />
The Display > Display Setup > General tab contains options that can<br />
improve decode performance when working with large buffers or trace<br />
files.<br />
In previous releases, when decoding a trace file or buffer, protocol<br />
interpreters would start by performing a prescan of the entire trace or<br />
buffer. For large trace files and buffers, this process could take a long<br />
time.<br />
To address this issue, <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong> provides the<br />
option of a windowed approach. Using the windowed approach, <strong>Sniffer</strong><br />
<strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong> starts by prescanning a user-specified<br />
portion of the trace file or buffer. When moving from window to window<br />
within the buffer or trace file, the previous prescanned information will<br />
be cleared from memory so the new window can be scanned. This way,<br />
decoded information is available more quickly.<br />
You specify both whether to use the windowed approach and the size of<br />
the window to be used in the Display > Display Setup > General tab.<br />
Set the reassembly options as follows:<br />
Reassemble entire trace file— Enable this option if you would<br />
like to reassemble the entire trace file or buffer before displaying<br />
decoded data. Disable this option if you would like to reassemble<br />
the trace file in “chunks.”<br />
Reassembly window size — Use this option to specify the size<br />
(in terms of the number of frames) of the “chunk” to be<br />
reassembled and displayed. As you move between chunks, one<br />
chunk is cleared out and scan another is scanned.<br />
The default and minimum value for the Reassembly window size<br />
is 5000. This value is configurable, but it is recommended that you<br />
edit this value only if it is absolutely necessary.