Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Capture<br />
<strong>Mode</strong><br />
<strong>Adaptive</strong><br />
Capture<br />
(Default)<br />
Raw<br />
Capture<br />
EARLY FIELD TRIAL Chapter 2<br />
Summary Postcapture Analysis<br />
In <strong>Adaptive</strong> Capture mode, <strong>Sniffer</strong> <strong>Adaptive</strong><br />
<strong>Application</strong> <strong>Analyzer</strong> extracts key fields<br />
from supported protocols and generates<br />
<strong>Adaptive</strong> Session Packets (ASPs) with<br />
derived payloads and compressed packet<br />
headers through the transport (TCP/UDP)<br />
layer. Hexadecimal bytes are not displayed<br />
for ASPs.<br />
In addition, <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong><br />
<strong>Analyzer</strong> stores metadata correlating ASPs<br />
with parent sessions to provide a flowaware<br />
view of network data. You can drill<br />
between the session view and the decode<br />
view during postcapture analysis to get<br />
both the top-down and bottom-up<br />
perspective.<br />
In Raw Capture mode, <strong>Sniffer</strong> <strong>Adaptive</strong><br />
<strong>Application</strong> <strong>Analyzer</strong> records packets as<br />
seen on the wire, including payloads (an<br />
optional packet slice setting can be used).<br />
In addition session statistics are not<br />
available. Instead, traditional tri-paned<br />
packet decodes, Expert analysis, and postanalysis<br />
tabs are available.<br />
34 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
Separate, correlated views provide<br />
session and packet statistics:<br />
• <strong>Adaptive</strong> Session View provides<br />
access to adaptive session records<br />
(ASRs).<br />
• <strong>Adaptive</strong> Decode View provides<br />
line by line interpretation of<br />
adaptive session packets (ASPs).<br />
Refer to About <strong>Sniffer</strong> <strong>Adaptive</strong><br />
Intelligence on page 16 for a summary<br />
of these two views.<br />
• Tri-pane packet decodes<br />
• Expert analyzer<br />
• Post-analysis tabs (Host Table,<br />
Matrix, Protocol Distribution,<br />
Statistics)<br />
2 Specify the Capture Buffer size (200 MB - 1 GB).
Change language