Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

10.03.2013 Views

Setting Protocol Aliases for the Postcapture Display EARLY FIELD TRIAL Chapter 8 196 Sniffer Adaptive Application Analyzer Table 8-10. Packet Selection Tab Options Option Description Clear Selected When this option is enabled, quick filters clear the selection of matching packets in the active Decode tab. Apply on Selected Set When this option is enabled, quick filters are applied only to the currently selected packets in the active Decode tab. Filtered Tab Name Use this option to specify how new tabs of filtered frames are named. New tabs will be added using the name you specify here along with a sequence number. Use the Tools > Options > Protocols tab to specify on what ports the postcapture display should expect various upper layer protocols running over TCP, UDP, or IPX (separate options are provided for each). The commonly established port for each upper layer protocol is provided by default. For most networks, the default port number for the listed upper layer protocols will be correct. However, If your network uses a proprietary implementation of a particular protocol, you can specify custom ports here. You can also rename existing protocols by overwriting the default name supplied in this tab. In addition, you can also add entirely custom protocols by clicking in a blank cell at the end of the list and supplying a protocol and port pair for a given transport. The postcapture display will provide traffic counts for the named protocol/port pair in its Protocol Distribution tab. NOTE: The aliases entered on this tab affect data display in the Protocol Distribution tab of the postcapture window. They do not affect data shown in the Quick Select window. To set aliases for data in the Quick Select window, use the Quick Select > Options > Aliases tab. See Setting Aliases Tab Options on page 250. Exporting and Importing Protocols Tab Settings The Tools > Options > Protocols tab includes Import and Export buttons that let you change the Protocols tab settings in force: The Export button opens a common Save As dialog box, allowing you to save out Protocols tab settings to an XML file.

EARLY FIELD TRIAL Raw Capture Mode Postcapture Analysis The Import button opens a common Browse dialog box in which you can navigate to an XML file of saved Protocols tab settings for import. The Import and Export buttons are particularly useful in the following situations: You want to create files of saved Protocols tab settings for use in different network environments. For example, you may commonly analyze network segments with protocol loads running over known but non-standard ports. You can switch Protocols tab settings in and out quickly using these buttons. You want to share Protocols tab settings with another Sniffer unit supporting this feature. You can export your settings to a file and then import them on a second unit. Searching for Frames in the Decode Display Because the Decode display can include thousands and thousands of frames, it can be useful to search for particular frames. Using Sniffer Adaptive Application Analyzer’s powerful search abilities, you can search for frames in the Decode display that match a text string, a certain data pattern, a certain status flag, or have an Expert symptom or diagnosis associated with them. NOTE: In addition to searching for frames, you can also advance to a particular frame in the Decode tab by specifying its number. Do this by selecting the Go to Frame command from the Display menu and supplying the frame number in the dialog box that appears. Use the Find Frame dialog box to search for frames. Display the Find Frame dialog box using any of the following commands: Select Find Frame from the Display menu. Select Find Frame from the Decode tab’s context menu (activated by right-clicking anywhere on the Decode tab). Use the Alt-F3 keyboard shortcut. The Find Frame dialog box contains the following tabs: Text — The Text tab lets you search for frames containing a specified text string. Time — The Time tab lets you search for frames with specific text in the delta, relative, or absolute time fields. User’s Guide 197

Setting Protocol Aliases for the Postcapture Display<br />

EARLY FIELD TRIAL Chapter 8<br />

196 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />

Table 8-10. Packet Selection Tab Options<br />

Option Description<br />

Clear Selected When this option is enabled, quick filters clear the<br />

selection of matching packets in the active Decode<br />

tab.<br />

Apply on Selected<br />

Set<br />

When this option is enabled, quick filters are<br />

applied only to the currently selected packets in<br />

the active Decode tab.<br />

Filtered Tab Name Use this option to specify how new tabs of filtered<br />

frames are named. New tabs will be added using<br />

the name you specify here along with a sequence<br />

number.<br />

Use the Tools > Options > Protocols tab to specify on what ports the<br />

postcapture display should expect various upper layer protocols running<br />

over TCP, UDP, or IPX (separate options are provided for each). The<br />

commonly established port for each upper layer protocol is provided by<br />

default. For most networks, the default port number for the listed upper<br />

layer protocols will be correct. However, If your network uses a<br />

proprietary implementation of a particular protocol, you can specify<br />

custom ports here. You can also rename existing protocols by<br />

overwriting the default name supplied in this tab.<br />

In addition, you can also add entirely custom protocols by clicking in a<br />

blank cell at the end of the list and supplying a protocol and port pair for<br />

a given transport. The postcapture display will provide traffic counts for<br />

the named protocol/port pair in its Protocol Distribution tab.<br />

NOTE: The aliases entered on this tab affect data display in the<br />

Protocol Distribution tab of the postcapture window. They do not<br />

affect data shown in the Quick Select window. To set aliases for<br />

data in the Quick Select window, use the Quick Select > Options ><br />

Aliases tab. See Setting Aliases Tab Options on page 250.<br />

Exporting and Importing Protocols Tab Settings<br />

The Tools > Options > Protocols tab includes Import and Export<br />

buttons that let you change the Protocols tab settings in force:<br />

The Export button opens a common Save As dialog box, allowing<br />

you to save out Protocols tab settings to an XML file.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!