Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Chapter 5<br />
98 Sniffer <strong>Portable</strong> <strong>Professional</strong><br />
Adding Custom Protocols to the ART Display<br />
If your network uses non-standard TCP or UDP ports for different upper<br />
layer protocols, or if you want to add a custom protocol running over TCP<br />
or UDP, you can still get ART analysis (and analysis from all other<br />
Monitor applications, too) by specifying the correct port number for<br />
different upper layer protocols in the Protocols tab of the Options dialog<br />
box (accessed by selecting the Options command from the Tools<br />
menu). Keep in mind, however, that if you do change the port numbers,<br />
you will need to stop and restart collection for your changes to take<br />
effect. You can do this using the Reset command in the File menu. See<br />
Adding Custom Protocols to the ART Display on page 108 for details.<br />
Not Seeing ART Data?<br />
If the ART displays are not populating with data, make sure that Sniffer<br />
<strong>Portable</strong> <strong>Professional</strong> is connected to the network in such a way that it<br />
is seeing both sides of a conversation – requests and responses. For<br />
example, if Sniffer <strong>Portable</strong> <strong>Professional</strong> is connected to a designated<br />
mirror port on a switch, make sure you that you have set up port<br />
mirroring in a way that ensures both inbound and outbound packets are<br />
being sent to the mirror port.<br />
IMPORTANT: Keep in mind that setting up port mirroring in this way<br />
will occasionally cause duplicate packets to appear in the Decode<br />
window.<br />
ART – The Tabular View<br />
The ART application’s Tabular view lists each detected application layer<br />
connection with the addresses of both the server and the client, detailed<br />
statistics for the response times on the connection, and overall traffic<br />
statistics for the connection (server bytes, client octets, retries, and<br />
timeouts).<br />
ART organizes connections by protocol. Each protocol you have enabled<br />
in the Display Protocols tab of the ART Options dialog box (accessed<br />
by clicking the Properties button in the ART window) has its own tab at<br />
the bottom of the ART window. You can view connections using different<br />
protocols by clicking on the appropriate tab at the bottom of the window.<br />
The Tabular View provides the statistics in the following table:
Change language