Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Setting Protocol Aliases for the Postcapture Display EARLY FIELD TRIAL Chapter 8 196 Sniffer Adaptive Application Analyzer Table 8-10. Packet Selection Tab Options Option Description Clear Selected When this option is enabled, quick filters clear the selection of matching packets in the active Decode tab. Apply on Selected Set When this option is enabled, quick filters are applied only to the currently selected packets in the active Decode tab. Filtered Tab Name Use this option to specify how new tabs of filtered frames are named. New tabs will be added using the name you specify here along with a sequence number. Use the Tools > Options > Protocols tab to specify on what ports the postcapture display should expect various upper layer protocols running over TCP, UDP, or IPX (separate options are provided for each). The commonly established port for each upper layer protocol is provided by default. For most networks, the default port number for the listed upper layer protocols will be correct. However, If your network uses a proprietary implementation of a particular protocol, you can specify custom ports here. You can also rename existing protocols by overwriting the default name supplied in this tab. In addition, you can also add entirely custom protocols by clicking in a blank cell at the end of the list and supplying a protocol and port pair for a given transport. The postcapture display will provide traffic counts for the named protocol/port pair in its Protocol Distribution tab. NOTE: The aliases entered on this tab affect data display in the Protocol Distribution tab of the postcapture window. They do not affect data shown in the Quick Select window. To set aliases for data in the Quick Select window, use the Quick Select > Options > Aliases tab. See Setting Aliases Tab Options on page 250. Exporting and Importing Protocols Tab Settings The Tools > Options > Protocols tab includes Import and Export buttons that let you change the Protocols tab settings in force: The Export button opens a common Save As dialog box, allowing you to save out Protocols tab settings to an XML file.
EARLY FIELD TRIAL Raw Capture Mode Postcapture Analysis The Import button opens a common Browse dialog box in which you can navigate to an XML file of saved Protocols tab settings for import. The Import and Export buttons are particularly useful in the following situations: You want to create files of saved Protocols tab settings for use in different network environments. For example, you may commonly analyze network segments with protocol loads running over known but non-standard ports. You can switch Protocols tab settings in and out quickly using these buttons. You want to share Protocols tab settings with another Sniffer unit supporting this feature. You can export your settings to a file and then import them on a second unit. Searching for Frames in the Decode Display Because the Decode display can include thousands and thousands of frames, it can be useful to search for particular frames. Using Sniffer Adaptive Application Analyzer’s powerful search abilities, you can search for frames in the Decode display that match a text string, a certain data pattern, a certain status flag, or have an Expert symptom or diagnosis associated with them. NOTE: In addition to searching for frames, you can also advance to a particular frame in the Decode tab by specifying its number. Do this by selecting the Go to Frame command from the Display menu and supplying the frame number in the dialog box that appears. Use the Find Frame dialog box to search for frames. Display the Find Frame dialog box using any of the following commands: Select Find Frame from the Display menu. Select Find Frame from the Decode tab’s context menu (activated by right-clicking anywhere on the Decode tab). Use the Alt-F3 keyboard shortcut. The Find Frame dialog box contains the following tabs: Text — The Text tab lets you search for frames containing a specified text string. Time — The Time tab lets you search for frames with specific text in the delta, relative, or absolute time fields. User’s Guide 197
- Page 145 and 146: EARLY FIELD TRIAL Adaptive Session
- Page 147 and 148: EARLY FIELD TRIAL Adaptive Session
- Page 149 and 150: EARLY FIELD TRIAL Session Overview
- Page 151 and 152: EARLY FIELD TRIAL Drilling Down to
- Page 153 and 154: EARLY FIELD TRIAL Adaptive Decode V
- Page 155 and 156: EARLY FIELD TRIAL Opening ASP Files
- Page 157 and 158: EARLY FIELD TRIAL Figure 7-9. Openi
- Page 159 and 160: EARLY FIELD TRIAL Using Filters wit
- Page 161 and 162: EARLY FIELD TRIAL Raw Capture Mode
- Page 163 and 164: EARLY FIELD TRIAL Table 8-1. Postca
- Page 165 and 166: EARLY FIELD TRIAL Introducing the P
- Page 167 and 168: EARLY FIELD TRIAL Granularity in De
- Page 169 and 170: EARLY FIELD TRIAL Packet Status Fla
- Page 171 and 172: EARLY FIELD TRIAL Table 8-5. Decode
- Page 173 and 174: EARLY FIELD TRIAL Types of Display
- Page 175 and 176: EARLY FIELD TRIAL Raw Capture Mode
- Page 177 and 178: EARLY FIELD TRIAL a The “Apply on
- Page 179 and 180: EARLY FIELD TRIAL Raw Capture Mode
- Page 181 and 182: EARLY FIELD TRIAL Raw Capture Mode
- Page 183 and 184: EARLY FIELD TRIAL Raw Capture Mode
- Page 185 and 186: EARLY FIELD TRIAL Using the Manual
- Page 187 and 188: EARLY FIELD TRIAL 5 Click OK. Figur
- Page 189 and 190: EARLY FIELD TRIAL Raw Capture Mode
- Page 191 and 192: EARLY FIELD TRIAL Setting Display S
- Page 193 and 194: EARLY FIELD TRIAL Raw Capture Mode
- Page 195: EARLY FIELD TRIAL Table 8-9. Summar
- Page 199 and 200: EARLY FIELD TRIAL Searching for Fra
- Page 201 and 202: EARLY FIELD TRIAL Raw Capture Mode
- Page 203 and 204: EARLY FIELD TRIAL Raw Capture Mode
- Page 205 and 206: EARLY FIELD TRIAL Raw Capture Mode
- Page 207 and 208: EARLY FIELD TRIAL Printing Decoded
- Page 209 and 210: EARLY FIELD TRIAL Using the Matrix
- Page 211 and 212: EARLY FIELD TRIAL Raw Capture Mode
- Page 213 and 214: EARLY FIELD TRIAL Using the Host Ta
- Page 215 and 216: EARLY FIELD TRIAL Using the Protoco
- Page 217 and 218: EARLY FIELD TRIAL Enabling VLAN Dat
- Page 219 and 220: EARLY FIELD TRIAL Expert Analysis O
- Page 221 and 222: EARLY FIELD TRIAL Expert Tool Bar T
- Page 223 and 224: EARLY FIELD TRIAL Expert Analysis
- Page 225 and 226: EARLY FIELD TRIAL Setting Expert Op
- Page 227 and 228: EARLY FIELD TRIAL Analyze Expert An
- Page 229 and 230: EARLY FIELD TRIAL Alarms Expert Ana
- Page 231 and 232: EARLY FIELD TRIAL Protocols To conf
- Page 233 and 234: EARLY FIELD TRIAL Subnet Masks To d
- Page 235 and 236: EARLY FIELD TRIAL To configure or d
- Page 237 and 238: EARLY FIELD TRIAL Oracle Options Mo
- Page 239 and 240: EARLY FIELD TRIAL IP Options Expert
- Page 241 and 242: EARLY FIELD TRIAL SECTION 4 Additio
- Page 243 and 244: EARLY FIELD TRIAL Setting Quick Sel
- Page 245 and 246: EARLY FIELD TRIAL Setting Quick Sel
Setting Protocol Aliases for the Postcapture Display<br />
EARLY FIELD TRIAL Chapter 8<br />
196 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
Table 8-10. Packet Selection Tab Options<br />
Option Description<br />
Clear Selected When this option is enabled, quick filters clear the<br />
selection of matching packets in the active Decode<br />
tab.<br />
Apply on Selected<br />
Set<br />
When this option is enabled, quick filters are<br />
applied only to the currently selected packets in<br />
the active Decode tab.<br />
Filtered Tab Name Use this option to specify how new tabs of filtered<br />
frames are named. New tabs will be added using<br />
the name you specify here along with a sequence<br />
number.<br />
Use the Tools > Options > Protocols tab to specify on what ports the<br />
postcapture display should expect various upper layer protocols running<br />
over TCP, UDP, or IPX (separate options are provided for each). The<br />
commonly established port for each upper layer protocol is provided by<br />
default. For most networks, the default port number for the listed upper<br />
layer protocols will be correct. However, If your network uses a<br />
proprietary implementation of a particular protocol, you can specify<br />
custom ports here. You can also rename existing protocols by<br />
overwriting the default name supplied in this tab.<br />
In addition, you can also add entirely custom protocols by clicking in a<br />
blank cell at the end of the list and supplying a protocol and port pair for<br />
a given transport. The postcapture display will provide traffic counts for<br />
the named protocol/port pair in its Protocol Distribution tab.<br />
NOTE: The aliases entered on this tab affect data display in the<br />
Protocol Distribution tab of the postcapture window. They do not<br />
affect data shown in the Quick Select window. To set aliases for<br />
data in the Quick Select window, use the Quick Select > Options ><br />
Aliases tab. See Setting Aliases Tab Options on page 250.<br />
Exporting and Importing Protocols Tab Settings<br />
The Tools > Options > Protocols tab includes Import and Export<br />
buttons that let you change the Protocols tab settings in force:<br />
The Export button opens a common Save As dialog box, allowing<br />
you to save out Protocols tab settings to an XML file.