Viavi Apex Enterprise G3-APEX-ENT-32T, User Manual

Page: 204 / 380

Introducing Probes
204 GigaStor (23 Feb 2018) — Archive/Non-authoritative version
GigaStor Active
probe instance
GigaStor Passive
probe instance
Observer Probe
1
Schedule packet
capture
X X X
Change directories
where data is
stored
X X X
Able to set
permissions
X X
Able to redirect to
different analyzer,
etc.
X X X
1.
An Observer probe is the Single Probe, Multi Probe, or Expert Probe software running on a non-
GigaStor probe.
A passive probe instance may capture packets to RAM and allows you to do
reactive analysis or look at real-time statistics for troubleshooting. The passive
probe instance binds to a virtual adapter or a network adapter that has data
coming to it that you want to capture. You can change whichever adapter a
passive probe instance is bound to without affecting any active probe instance.
By default a passive probe instance uses 12 MB of RAM. You can reserve more
memory for passive probe instances if you wish.
Caution: With a GigaStor you have the option of which NIC to bind the
passive probe instance. Do not bind any passive probe instances to the
capture card adapter if at all possible. A copy of all packets is sent from the
adapter to every passive probe instance attached to it. If you have several
passive probe instances attached to the capture card adapter, the capture
card’s performance is significantly affected. Instead attach the passive probe
instances to either a 10/100/1000 adapter or to a non-existent one.
If you have a passive probe instance connected to a GigaStor, you can mine data
that has already been written to the RAID disk by using an active probe instance.
There should be one passive probe instance for each simultaneous Observer
user on a GigaStor. By using a passive probe instance, instead of an active probe
instance, only one copy of data is being captured and written to disk, which
reduces the processor load and the required storage space. For troubleshooting
and most uses in Observer passive probe instances are appropriate.
An active probe instance on a GigaStor captures network traffic and writes it to
the RAID array. An active probe instance should have as large of a RAM buffer as
possible to cushion between the network throughput rate and the array write
rate. Like a passive probe instance, it can also be used to mine data from the hard
disk, however a passive instance is better suited for the task. An active probe
instance cannot start a packet capture while the GigaStor Control Panel is open.
By default there is one active probe instance for GigaStor. It binds to the network
adapter and its ports. If you have a specific need to separate the adapter’s ports
and monitor them separately, you can do so through passive probe instances or
you can create separate virtual adapters.
♦
Only one active probe instance per GigaStor.
♦
Set scheduling to Always for the active probe instance so that it is
constantly capturing and writing data. Use a passive probe instance to
mine the data.