Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

EARLY FIELD TRIAL Chapter 9
224 Sniffer Adaptive Application Analyzer
The Expert also provides concise explanations for each symptom and
diagnosis generated. To display a detailed explanation of a symptom or
diagnosis, click the question mark (?) to the right of the symptom/
diagnosis description in the Expert Detail pane. (You may have to scroll
to the right of the pane to see the ?.)
Postcapture Expert/Decode Statistics and CRCs
Postcapture Decode and Expert statistics for raw packets do not take
into account the CRC bytes attached to frames. This is by design, as the
CRC bytes are not a part of the frame. Because of this, the Expert will
show average frame sizes that are smaller than those reported by other
views that do include the CRC – for example, the Statistics tab in the
postcapture display, and all displays in the Quick Select window. For
Ethernet, the difference will be 4 bytes; for WAN PPP, either 2 or 4 bytes,
depending on how the network implements the CRC field.
Extra Characters in Expert Displays for High Counts?
Occasionally, you may see counts in the Expert displays followed by the
letters M, G, or T. These letters stand for Million, Giga, and Tera,
respectively.
Saving Expert Objects with Trace Files
During capture, the Expert creates Expert objects based on the frames
it sees. Over a long capture, some of the frames which the Expert used
to create these objects will most likely pass out of the capture buffer to
make room for new ones. However, the Expert objects themselves will
still be in the database.
You can make sure that all the Expert objects created during a capture
session are saved along with your trace file by enabling the Save Expert
Objects checkbox in the Save As dialog box. When this option is
enabled, all of the Expert objects in the database are written to the end
of the saved trace file. Then, when you open a trace with saved Expert
objects, make sure to enable the Load Expert Objects checkbox in the
Open dialog box. This way, when you reopen a saved trace file, you can
make sure you see all the Expert objects created during a capture
session instead of just the ones the Expert creates based on the frames
still in the file.
Notes on the Save/Load Expert Objects Feature
If you enable the Load Expert Objects option when opening a
trace file that has no saved Expert objects, no error will occur. The
saved file will simply be loaded normally.