Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

EARLY FIELD TRIAL
Analyze
Expert Analysis
In addition to using capture filters, which let you select the particular
traffic you need for network analysis, you can exclude certain Expert
layers from processing. This enables you to focus on specific network
problems precisely.
IMPORTANT: Keep in mind that if you exclude a certain layer from
Expert processing, you are also automatically excluding Expert
processing from occurring at any layers above the excluded layer. For
example, if you exclude the Connection layer from Expert processing, no
Expert analysis will occur at the Session, Application, or Service layers.
Expert requires the analysis provided at the supporting layers to provide
analysis for higher layers.
Max. Objects
To reduce the amount of memory needed to create network objects, you
can specify the maximum number of objects that the Expert can create
for each Expert layer. To help with configuration, the Expert shows the
estimated amount of memory needed for the number of objects selected
for each layer.
When the maximum number is reached, Expert will recycle old objects
(if the Recycle Expert Objects options is selected) or stop creating
new objects. The range for this option is 0 to 99999.
Est. Memory
The Est. Memory column to the right of Max Objects shows the
estimated amount of memory needed to process the number of objects
specified in the Max Objects column for each Expert layer. The total
estimated amount of memory needed to process all selected objects is
shown under the grid.
Recycle Expert Objects
The Experts’ database of network objects is built from information
accumulated in the capture buffer. Because some networks can be
immensely complex in their structure, at some point the Expert will have
no more memory for new network objects. If you recycle objects, the
Expert continues to add new objects to the database, overwriting the
least interesting objects when it runs out of memory (in general, older
objects with no associated errors are considered “least interesting”).
If you don’t recycle objects, the Expert stops creating new objects when
it runs out of memory, and instead, continues to interpret traffic in
accordance with the information it has already stored in its database.
User’s Guide 227