Sniffer® Portable Professional User's Guide - NetScout

Expert Threshold Settings
Real-Time Expert Display
Expert thresholds determine whether the Expert generates a symptom
or a diagnosis (also called an alarm) based on a given network event.
To change Expert thresholds, select Expert Options from the Tools
menu and click the Alarms tab.
Expand and/or collapse the Expert layers using the tools in the left
column. Clicking “1” or “0” at the top of the column expands or collapses
all Expert layers. Click the “+” next to a layer to open an Expert layer
and display all symptoms and diagnoses (alarms). After expanding the
layer, expand again to display the settings for the alarm.
Options in the Alarms tab include:
Changing Threshold values. Double-click in the Threshold Value
cell and type the new threshold value.
Reset Threshold values. Click Reset to reset the selected value
to the factory default, or click Reset All to reset all settings for all
layers to the factory defaults.
IMPORTANT: The default thresholds have been carefully calculated to
ensure accurate and informative symptom and diagnosis detection.
Before changing any of the thresholds, make sure you understand your
network.
For information about alarm severity levels and the Alarm log, refer to
Managing Alarms on page 257.
Expert Protocol Settings
You can use the options in the Tools > Expert Options > Protocols
tab to specify which protocols you would like the Expert to analyze.
Limiting Expert analysis to a selected set of protocols will help improve
the Expert’s performance.
The Protocols tab arranges protocols by the Expert layer at which they
are analyzed. You can cascade each layer open by clicking the + sign
next to its entry in the dialog box. Then, click in the Analyze column to
specify either Yes, you would like Expert analysis for this protocol, or
No, you would not like Expert analysis for this protocol.
Click Enable All or Disable All to enable or disable Expert analysis for
all protocols.
User’s Guide 137