Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
EARLY FIELD TRIAL Chapter 8 Searching for Frames with Expert Alarms 206 Sniffer Adaptive Application Analyzer To search for packets exhibiting a particular Expert symptom or diagnosis: 1 Display the Find Frame dialog box using any of the following commands: Select Find Frame from the Display menu. Select Find Frame from the Decode tab’s context menu (activated by right-clicking anywhere on the Decode tab). Use the Alt-F3 keyboard shortcut. 2 Click the Expert tab. 3 Select the Expert alarm to search for from the dropdown list provided. The list includes each of the Expert alarms found somewhere in the currently displayed Decode tab. 4 Click Up or Down to specify the search direction. 5 Click OK. If a frame exhibiting the specified Expert alarm is found, the frame will be displayed in the Decode Display. Press F3 to search for the next packet matching the same criteria. Figure 8-21. Expert Tab of the Find Frame Dialog Box
EARLY FIELD TRIAL Printing Decoded Packets Raw Capture Mode Postcapture Analysis You can print the decoded data packets in the Decode Display. You can print a line-by-line list of the packets in the Summary pane, a list of protocol fields in the Detail pane, the hex data in the Hex pane, or a combination of any of the three panes. To print decoded packets, select Print from the File menu to display the Print dialog box. Use this dialog box as follows: In the Print Range area, select the range of packets you want to print. In the Format area, select which panes (Summary, Detail, Hex) you want to print and whether to print the data in commaseparated values format for import into a spreadsheet application. If you enable the CSV Format and Print to file options, you may want to replace the default .PRN extension for printed output with a .CSV extension. The .CSV extension tells most spreadsheet applications (including MS-Excel) to expect comma-delimited data and import it accordingly (that is, with each comma-separated value in its own column). NOTE: If you open a CSV Format file saved with the default .PRN extension in MS-Excel, you will be prompted to supply the character used for the delimiter in the file. As you would expect when the CSV Format option is enabled, the delimiter used in the saved output file is a comma. Check the Print to File option to output the decoded data packets to a file. During printing, you can use the Abort Printing toolbar button or File > Abort Printing menu selection to abort the current print job. Changing the Format of Printed Summary Pane Data You can control which optional fields in the Summary pane are included in printed output, and what order they are printed in. Summary pane fields are printed in a "what you see is what you get" ("WYSIWYG") format -- columns in the pane are printed in the same order in which they are show in the Decode display. Because of this, you can use the following techniques to control the format of printed summary data: User’s Guide 207
- Page 155 and 156: EARLY FIELD TRIAL Opening ASP Files
- Page 157 and 158: EARLY FIELD TRIAL Figure 7-9. Openi
- Page 159 and 160: EARLY FIELD TRIAL Using Filters wit
- Page 161 and 162: EARLY FIELD TRIAL Raw Capture Mode
- Page 163 and 164: EARLY FIELD TRIAL Table 8-1. Postca
- Page 165 and 166: EARLY FIELD TRIAL Introducing the P
- Page 167 and 168: EARLY FIELD TRIAL Granularity in De
- Page 169 and 170: EARLY FIELD TRIAL Packet Status Fla
- Page 171 and 172: EARLY FIELD TRIAL Table 8-5. Decode
- Page 173 and 174: EARLY FIELD TRIAL Types of Display
- Page 175 and 176: EARLY FIELD TRIAL Raw Capture Mode
- Page 177 and 178: EARLY FIELD TRIAL a The “Apply on
- Page 179 and 180: EARLY FIELD TRIAL Raw Capture Mode
- Page 181 and 182: EARLY FIELD TRIAL Raw Capture Mode
- Page 183 and 184: EARLY FIELD TRIAL Raw Capture Mode
- Page 185 and 186: EARLY FIELD TRIAL Using the Manual
- Page 187 and 188: EARLY FIELD TRIAL 5 Click OK. Figur
- Page 189 and 190: EARLY FIELD TRIAL Raw Capture Mode
- Page 191 and 192: EARLY FIELD TRIAL Setting Display S
- Page 193 and 194: EARLY FIELD TRIAL Raw Capture Mode
- Page 195 and 196: EARLY FIELD TRIAL Table 8-9. Summar
- Page 197 and 198: EARLY FIELD TRIAL Raw Capture Mode
- Page 199 and 200: EARLY FIELD TRIAL Searching for Fra
- Page 201 and 202: EARLY FIELD TRIAL Raw Capture Mode
- Page 203 and 204: EARLY FIELD TRIAL Raw Capture Mode
- Page 205: EARLY FIELD TRIAL Raw Capture Mode
- Page 209 and 210: EARLY FIELD TRIAL Using the Matrix
- Page 211 and 212: EARLY FIELD TRIAL Raw Capture Mode
- Page 213 and 214: EARLY FIELD TRIAL Using the Host Ta
- Page 215 and 216: EARLY FIELD TRIAL Using the Protoco
- Page 217 and 218: EARLY FIELD TRIAL Enabling VLAN Dat
- Page 219 and 220: EARLY FIELD TRIAL Expert Analysis O
- Page 221 and 222: EARLY FIELD TRIAL Expert Tool Bar T
- Page 223 and 224: EARLY FIELD TRIAL Expert Analysis
- Page 225 and 226: EARLY FIELD TRIAL Setting Expert Op
- Page 227 and 228: EARLY FIELD TRIAL Analyze Expert An
- Page 229 and 230: EARLY FIELD TRIAL Alarms Expert Ana
- Page 231 and 232: EARLY FIELD TRIAL Protocols To conf
- Page 233 and 234: EARLY FIELD TRIAL Subnet Masks To d
- Page 235 and 236: EARLY FIELD TRIAL To configure or d
- Page 237 and 238: EARLY FIELD TRIAL Oracle Options Mo
- Page 239 and 240: EARLY FIELD TRIAL IP Options Expert
- Page 241 and 242: EARLY FIELD TRIAL SECTION 4 Additio
- Page 243 and 244: EARLY FIELD TRIAL Setting Quick Sel
- Page 245 and 246: EARLY FIELD TRIAL Setting Quick Sel
- Page 247 and 248: EARLY FIELD TRIAL Setting Graph Tab
- Page 249 and 250: EARLY FIELD TRIAL Setting Quick Sel
- Page 251 and 252: EARLY FIELD TRIAL Setting Quick Sel
- Page 253 and 254: EARLY FIELD TRIAL Figure 10-6. Addi
- Page 255 and 256: EARLY FIELD TRIAL Using the Address
EARLY FIELD TRIAL Chapter 8<br />
Searching for Frames with Expert Alarms<br />
206 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
To search for packets exhibiting a particular Expert symptom<br />
or diagnosis:<br />
1 Display the Find Frame dialog box using any of the following<br />
commands:<br />
Select Find Frame from the Display menu.<br />
Select Find Frame from the Decode tab’s context menu<br />
(activated by right-clicking anywhere on the Decode tab).<br />
Use the Alt-F3 keyboard shortcut.<br />
2 Click the Expert tab.<br />
3 Select the Expert alarm to search for from the dropdown list<br />
provided. The list includes each of the Expert alarms found<br />
somewhere in the currently displayed Decode tab.<br />
4 Click Up or Down to specify the search direction.<br />
5 Click OK. If a frame exhibiting the specified Expert alarm is found,<br />
the frame will be displayed in the Decode Display. Press F3 to<br />
search for the next packet matching the same criteria.<br />
Figure 8-21. Expert Tab of the Find Frame Dialog Box
Change language