10.03.2013 Views

Sniffer® Portable Professional User's Guide - NetScout

Sniffer® Portable Professional User's Guide - NetScout

Sniffer® Portable Professional User's Guide - NetScout

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Capturing Packets<br />

When Buffer is Full. Select to automatically stop the capture<br />

(Stop capture) when the buffer is full or overwrite older data<br />

in the buffer (Wrap buffer). You can select these options only<br />

if the Save to File option is disabled.<br />

Packet Size. You can save the entire packet in the capture<br />

buffer, or truncate each packet by setting the Packet Size<br />

option when defining a capture filter. Move the slider to select<br />

the size of the packet to be captured and saved in the buffer.<br />

A data packet size greater than the specified size will be<br />

truncated. You can select Whole packet, 64, 128, 256, 512,<br />

1024, 4096, 8192, 16384, or 18432 bytes.<br />

By truncating large packets, you can save more packets in<br />

the capture buffer, thus extending the time covered by the<br />

capture and reducing the size of the capture data file, saving<br />

disk space (assuming you save the capture buffer to disk).<br />

On a very busy network, truncating frames may also help<br />

avoid losing frames, since longer frames take longer to store.<br />

Save to File. You can set the Filename prefix and the<br />

Number of files to be spooled. The maximum number of files<br />

allowed is 99,999.<br />

Each file is the same size as the defined capture buffer. For<br />

example, if you select the 4 MB buffer size, each file created<br />

will be 4 MB in size. (The last file size may be smaller than 4<br />

MB.) Setting the buffer size to between 8 and 12 MB will<br />

improve capture performance.<br />

You may select the Unique names option to guarantee that<br />

the file names created by packet capture are unique when<br />

being stored in the same directory. This is a useful option<br />

when you use packet capture spooling in conjunction with the<br />

capture trigger repeat mode. Several packet capture<br />

sequences can be saved without overwriting earlier<br />

sequences.<br />

By selecting the Wrap file names option, the capture will<br />

continue to spool to disk files, overwriting the first file if the<br />

last file is full. Otherwise, the capture will stop once it<br />

reaches the end of the last file.<br />

3 If you would like to start capture based on the specified filter<br />

criteria, click Start Capture directly from the Define Filter dialog<br />

box. This action saves the filter criteria and starts a capture based<br />

on the active filter in the dialog box.<br />

4 If you would like to save the filter criteria, click OK.<br />

User’s <strong>Guide</strong> 125

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!