Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Capturing Packets<br />
When Buffer is Full. Select to automatically stop the capture<br />
(Stop capture) when the buffer is full or overwrite older data<br />
in the buffer (Wrap buffer). You can select these options only<br />
if the Save to File option is disabled.<br />
Packet Size. You can save the entire packet in the capture<br />
buffer, or truncate each packet by setting the Packet Size<br />
option when defining a capture filter. Move the slider to select<br />
the size of the packet to be captured and saved in the buffer.<br />
A data packet size greater than the specified size will be<br />
truncated. You can select Whole packet, 64, 128, 256, 512,<br />
1024, 4096, 8192, 16384, or 18432 bytes.<br />
By truncating large packets, you can save more packets in<br />
the capture buffer, thus extending the time covered by the<br />
capture and reducing the size of the capture data file, saving<br />
disk space (assuming you save the capture buffer to disk).<br />
On a very busy network, truncating frames may also help<br />
avoid losing frames, since longer frames take longer to store.<br />
Save to File. You can set the Filename prefix and the<br />
Number of files to be spooled. The maximum number of files<br />
allowed is 99,999.<br />
Each file is the same size as the defined capture buffer. For<br />
example, if you select the 4 MB buffer size, each file created<br />
will be 4 MB in size. (The last file size may be smaller than 4<br />
MB.) Setting the buffer size to between 8 and 12 MB will<br />
improve capture performance.<br />
You may select the Unique names option to guarantee that<br />
the file names created by packet capture are unique when<br />
being stored in the same directory. This is a useful option<br />
when you use packet capture spooling in conjunction with the<br />
capture trigger repeat mode. Several packet capture<br />
sequences can be saved without overwriting earlier<br />
sequences.<br />
By selecting the Wrap file names option, the capture will<br />
continue to spool to disk files, overwriting the first file if the<br />
last file is full. Otherwise, the capture will stop once it<br />
reaches the end of the last file.<br />
3 If you would like to start capture based on the specified filter<br />
criteria, click Start Capture directly from the Define Filter dialog<br />
box. This action saves the filter criteria and starts a capture based<br />
on the active filter in the dialog box.<br />
4 If you would like to save the filter criteria, click OK.<br />
User’s <strong>Guide</strong> 125