18 | GigaStor™ (pub. 25.Apr.2014)
Figure 4: Typical network
What is a probe instance?
Observer has only one kind of probe instance: the
probe instance
. If you have a GigaStor then you have two
special probe instance types available to you: the
active probe instance
and the
passive probe instance
.
The Observer analyzer uses probes to capture network data. In some cases you may want or need more than one
probe in a specific location. You can achieve that through probe instances. A probe instance provides you the
ability to look at multiple network interfaces, have multiple views of the same interface, or to publish to multiple
Observer analyzers.
compares the features of active and passive probe instances with an Observer probe
instance found on all non-GigaStor probes.
Table 2: Active vs. passive GigaStor instances and Observer probe
GigaStor Active probe
instance
GigaStor Passive probe
instance
Better suited for troubleshooting
X
X
Better suited for data capture
X
Start packet capture
X
X
X
Stop packet capture
X
X
X
Start GigaStor packet capture
X
Schedule packet capture
X
X
X
Change directories where data is
stored
X
X
X
Able to set permissions
X
X
Able to redirect to different
analyzer, etc.
X
X
X
An Observer probe is the Single Probe, Multi Probe, or Expert Probe software running on a non-GigaStor probe.
A passive probe instance may capture packets to RAM and allows you to do reactive analysis or look at real-time
statistics for troubleshooting. The passive probe instance binds to a virtual adapter or a network adapter that
has data coming to it that you want to capture. You can change whichever adapter a passive probe instance is