Sniffer® Portable Professional User's Guide - NetScout

Table 8-1. Postcapture Display Tabs
Tab Description
Displaying Captured Data
Each of the tabs in the postcapture window provides different views of
the data in the buffer or trace file, as summarized in the table below.
Expert Displays the results of proprietary Expert analysis, showing network objects,
symptoms, and diagnoses by network layer. Provides the same functionality as the
real-time Expert, except for data/objects already in the capture buffer or trace file.
See Postcapture Expert Display on page 161
Decode Provides classic, line-by-line protocol decodes in a tri-pane window. Sophisticated
automatic filtering features let you select a packet in the Summary pane and
automatically filter on different components of the packet (source/destination
addresses, ports, and so on).
See Postcapture Decode Display on page 162.
Matrix Provides the same functionality as the real-time Matrix, except for data already in the
buffer or trace file. Statistics are provided on conversations taking place on the
network.
See Postcapture Matrix Tab on page 202
Host Table Provides the same functionality as the real-time Host Table, except for data already in
the buffer or trace file. Statistics are broken out for each host detected on the network.
Different tabs let you focus on wireless hosts, IP hosts, MAC hosts, and so on.
See Postcapture Host Table Tab on page 206.
Protocol
Distribution
Provides the same functionality as the real-time Protocol Distribution view, except for
data already in the buffer or trace file. Statistics are broken out by protocol family. You
can focus on MAC, IP, or IPX layer protocols.
See Postcapture Protocol Distribution Tab on page 208.
Statistics Provides a variety of global statistics on the data in the buffer or trace file, including
capture start/stop times, average speeds, and packet counts for a variety of basic
categories.
See Postcapture Statistics Tab on page 210.
Filtered
Tabs
By default, display filters return the filtered frames in a new tab at the bottom of the
postcapture display window. If you prefer, you can enable the Select matching
option. When this option is enabled, frames matching the filter appear “marked” in the
leftmost column of the active Decode tab – their checkboxes are checked.
See Setting Display Filters on page 167 for more information on how to use display
filters in the Decode tab.
NOTE: The Matrix, Host table, Protocol Distribution, and Statistics
tabs appear at the bottom of the Display window only if the Post
analysis tabs box is checked on the General tab of the Display >
Display Setup dialog box. Similarly, the Expert tab only appears if
the Expert tab box is checked.
User’s Guide 159