Sniffer® Portable Professional User's Guide - NetScout

Real-Time Expert Display
Overview
7
This section introduces the Expert display, describes its major concepts,
and gives you a summary of how to use its functionality.
About the Expert Display on page 131
Setting Expert Options on page 134
Setting Automatic Expert Display Filters on page 151
Displaying Context-Sensitive Explain Messages on page 153
Rearranging the Expert Display on page 153
Exporting the Contents of the Expert Database on page 154
IMPORTANT: Both the Sniffer Portable Professional online help and the
Sniffer Decode and Expert Reference provide full details on working with
the Expert analyzer. This chapter provides a quick summary of the topic,
letting you get up and running quickly.
About the Expert Display
The Expert display shows the results of Expert analysis. Expert analysis
can occur during a capture session, showing the results in real time. It
can also occur after a capture session when the display function is
invoked.
During Expert analysis, a database of network objects is constructed
from the traffic seen. The Expert protocol interpreters learn all about the
network stations, routing nodes, subnetworks, and connections related
to the frames in the capture buffer. Using this information, potential
problems are detected and you are alerted to issues that may exist on
the network. These problems are categorized as being either symptoms
or diagnoses:
A symptom indicates that a threshold has been exceeded and may
indicate a problem on your network.
User’s Guide 131