Viavi Apex Enterprise G3-APEX-ENT-32T, Руководство пользователя, Страница: 230 / 380

8
Chapter 8: Stream Reconstruction
Reconstructing streams of HTTP, VoIP, and more
The process of capturing and reconstructing traffic is pretty much the same
regardless of traffic type. Use these steps to reconstruct the stream.
Note:
Stream reconstruction (including VoIP) is illegal in some jurisdictions
and may be disabled by VIAVI to comply with those laws.
The process described here is for reconstructing HTTP, but the process is the same
for other applications, except instep 6 you would choose the appropriate menu
option.
1. Isolate the time frame in the Detail Chart you want to analyze. See Selecting a
time frame to analyze (page 223) .
2. (Optional) Using the various Statistics tabs, select IP Stations tab and choose
the station(s) you want to isolate. This creates a filter.
3. Click Update Chart. This updates the Detail Chart and shows you all of the
traffic from the address.
4. You can further filter the chart and reports by selecting specific traffic types
(for example, HTTP, SMTP, Telnet, and so on).
5. Analyze the data using one of the options described in Mining data from
your GigaStor (page 220) . This opens your data in the Decode tab in Observer
Analyzer .
6. Assuming the data is HTTP, select a packet in the Decode tab and right-click.
Choose TCP Dump (HTTP) from the menu. This analyzes the data and opens it
in the Expert tab.
7. Scroll through the decoded packets. Click the “ReconstructedPage.html” files
to see the web page as it looked when the user saw it.