Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Classic Postcapture Analysis EARLY FIELD TRIAL Chapter 2 40 Sniffer Adaptive Application Analyzer When capturing in Classic mode, clicking Mine displays the selected packets in the postcapture display window (Figure 2-9): The postcapture display window features two main tabs – Expert and Decode – as well as a variety of others providing different views of the data. Available tabs are summarized in the table below: a b Postcapture display tabs. The Decode tab always appears. The other tabs appear by default, but can be disabled. c d e Figure 2-9. Classic Postcapture Analysis
EARLY FIELD TRIAL Table 2-1. Postcapture Display Tabs Tab Description Quick Start – Five Steps Expert Displays the results of proprietary Expert analysis, showing network objects, symptoms, and diagnoses by network layer: •The Expert Overview (a) pane shows the network analysis layers (similar in concept to the ISO layers) and the Expert overview statistics (objects, symptoms, or diagnoses) for each layer. •The Expert Summary (b) pane shows key summary information for the layer and statistics selected in the Expert Overview panel. •The Protocol Statistics (c) pane displays the amount of traffic (in frames and bytes) for each protocol encountered for the layer you selected in the Expert Overview panel. •The Detail Tree (d) pane shows a hierarchical listing of all layers below those selected in the Expert Overview and Expert Summary panels. •The Expert Details (e) pane is a collection of information tables for the data selected in the Summary pane. See Expert Analysis on page 219. Decode Provides classic, line-by-line protocol decodes in a tri-pane window. Sophisticated automatic filtering features let you select a packet in the Summary pane and automatically filter on different components of the packet (source/destination addresses, ports, and so on). See Introducing the Packet Decode Tab on page 165. Matrix Provides statistics on conversations taking place on the network. See Using the Matrix Tab on page 209 Host Table Provides statistics broken out for each host detected on the network. Different tabs let you focus on IP hosts, MAC hosts, and so on. See Using the Host Table Tab on page 212. Protocol Distribution Provides statistics broken out by protocol family. You can focus on MAC, IP, or IPX layer protocols. See Using the Protocol Distribution Tab on page 214. Statistics Provides a variety of global statistics, including capture start/stop times, average speeds, and packet counts for a variety of basic categories. See Using the Statistics Tab on page 216. Filtered Tabs By default, display filters return the filtered frames in a new tab at the bottom of the postcapture display window. If you prefer, you can enable the Select matching option. When this option is enabled, frames matching the filter appear “marked” in the leftmost column of the active Decode tab – their checkboxes are checked. See Working with Display Filters on page 172 for more information on how to use display filters in the Decode tab. User’s Guide 41
- Page 1 and 2: EARLY FIELD TRIAL Sniffer ® Adapti
- Page 3 and 4: EARLY FIELD TRIAL "This product inc
- Page 5 and 6: EARLY FIELD TRIAL Contents Section
- Page 7 and 8: EARLY FIELD TRIAL Contents Overview
- Page 9 and 10: EARLY FIELD TRIAL Contents Setting
- Page 11 and 12: EARLY FIELD TRIAL SECTION 1 Introdu
- Page 13 and 14: EARLY FIELD TRIAL Sniffer Adaptive
- Page 15 and 16: EARLY FIELD TRIAL Figure 1-2. Adapt
- Page 17 and 18: EARLY FIELD TRIAL Sniffer Adaptive
- Page 19 and 20: EARLY FIELD TRIAL Sample Trace File
- Page 21 and 22: EARLY FIELD TRIAL Sniffer Adaptive
- Page 23 and 24: EARLY FIELD TRIAL Key Terms Table 1
- Page 25 and 26: EARLY FIELD TRIAL Table 1-3. Key Te
- Page 27 and 28: EARLY FIELD TRIAL Quick Start - Fiv
- Page 29 and 30: EARLY FIELD TRIAL Double-click the
- Page 31 and 32: EARLY FIELD TRIAL Quick Start - Fiv
- Page 33 and 34: EARLY FIELD TRIAL Step 4 - Capturin
- Page 35 and 36: EARLY FIELD TRIAL Capture Mode Adap
- Page 37 and 38: EARLY FIELD TRIAL Step 5 - Mining P
- Page 39: EARLY FIELD TRIAL Adaptive Postcapt
- Page 43 and 44: EARLY FIELD TRIAL SECTION 2 Getting
- Page 45 and 46: EARLY FIELD TRIAL Working with the
- Page 47 and 48: EARLY FIELD TRIAL Introducing the N
- Page 49 and 50: EARLY FIELD TRIAL Other Navigation
- Page 51 and 52: EARLY FIELD TRIAL Using the Time Se
- Page 53 and 54: EARLY FIELD TRIAL Working with the
- Page 55 and 56: EARLY FIELD TRIAL Zoom Menu Working
- Page 57 and 58: EARLY FIELD TRIAL Introducing the G
- Page 59 and 60: EARLY FIELD TRIAL Selected Statisti
- Page 61 and 62: EARLY FIELD TRIAL Pie Chart Working
- Page 63 and 64: EARLY FIELD TRIAL Column Chart Work
- Page 65 and 66: EARLY FIELD TRIAL Time Series Chart
- Page 67 and 68: EARLY FIELD TRIAL Working with the
- Page 69 and 70: EARLY FIELD TRIAL Working with the
- Page 71 and 72: EARLY FIELD TRIAL Using the Statist
- Page 73 and 74: EARLY FIELD TRIAL Summary Tab a Usi
- Page 75 and 76: EARLY FIELD TRIAL Using the Statist
- Page 77 and 78: EARLY FIELD TRIAL Port Tab Using th
- Page 79 and 80: EARLY FIELD TRIAL Network Tab Using
- Page 81 and 82: EARLY FIELD TRIAL Destination Tab U
- Page 83 and 84: EARLY FIELD TRIAL Using the Statist
- Page 85 and 86: EARLY FIELD TRIAL VLAN ID Tab Using
- Page 87 and 88: EARLY FIELD TRIAL Reports Tabs Usi
- Page 89 and 90: EARLY FIELD TRIAL Top Conversations
Classic Postcapture Analysis<br />
EARLY FIELD TRIAL Chapter 2<br />
40 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
When capturing in Classic mode, clicking Mine displays the selected<br />
packets in the postcapture display window (Figure 2-9):<br />
The postcapture display window features two main tabs – Expert and<br />
Decode – as well as a variety of others providing different views of the<br />
data. Available tabs are summarized in the table below:<br />
a b<br />
Postcapture display tabs. The Decode<br />
tab always appears. The other tabs<br />
appear by default, but can be disabled.<br />
c d e<br />
Figure 2-9. Classic Postcapture Analysis
Change language