Viavi Apex Enterprise G3-APEX-ENT-32T, User Manual

Page: 221 / 380

Mining data from your GigaStor
Chapter 7: Mining GigaStor Data 221
This option: Allow you to do this:
of the screen, but without using any filter. See Analyzing data
without any filters (page 225) .
Select an existing
filter
Takes all packets in the selected time frame on the Detail Chart
and analyzes it using the analysis type chosen at the bottom of
the screen and applies the filter you select (after clicking OK).
See Analyzing data with filters from the Observer filter editor
(page 225) .
Filter using selected
GigaStor entries
Takes all packets in the selected time frame on the Detail Chart
and creates a one-time use filter for you using the options you
chose from the Mac Stations, IP Stations, IP Pairs or any of the
other tabs in the GigaStor Control Panel. See Analyzing data by
combining GigaStor Control Panel and Observer filters (page
227)
VoIP and
Videoconferencing
calls by SIP tag
Takes all of the packets in the selected time frame on the Detail
Chart and allows you to extract VoIP and videoconferencing calls
based on a SIP tag. For further details about the Settings, see
How to extract VoIP and video calls from your GigaStor (page
231) .
Reorder and filter
based on trailer
timestamp
Some switch aggregators add their own timestamp to packets
and can cause packets to have a different order than they were
actually seen by the GigaStor. If selected, Observer reorders and
filters packets based on the timestamp information from the
switch aggregator you chose from the list instead of from the
GigaStor.
How to reorder packets based on a trailer timestamp (page
223)
Include Expert
information in
analysis filter
Expert Information packets provide context of network
conditions during the time that the traffic was captured.
The expert frames may provide you insight into what was
happening that may have influenced a condition within a packet
capture you are analyzing.
Display selected
filter before
starting analysis
Allows you to view the filter before Observer begins analyzing
the packet capture. For example, you might choose this option if
you have already used the filter and the output is has excluded
traffic you were expecting. By displaying the filter, you can
inspect it to see why it may excluding the traffic.
Analysis Type
Expert analysis and
decode
Along with the packet decode, this provides Observer's
advanced expert analysis, such as protocol analysis, top talkers,
Internet Observer, Application Transaction Analysis, VLAN
information, and Forensic Analysis using Snort. Use this option
if you want to deep dive into the packets with ability to view
common services and applications, response performance by
severity, port-based protocols with slow response, network and
application problems with local traffic and WAN/Internet traffic
distinction, and more.
Decode without
expert analysis
Provides a packet decode without any of the insight of expert
features listed above.
FIX analysis Used in conjunction with a FIX analysis profile, the results are
displayed on the FIX Analysis tab in the GigaStor Control Panel.
See Analyzing FIX transactions (page 250) . Use this option
if you need to see the raw FIX protocol packets and headers,
highlight just the FIX data, filter a trade by order ID for further
analysis, or to validate a specific transaction.