Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /home/newdedyk/domains/bkmanuals.com/public_html/includes/pages/manual_inc.php on line 26
Network Instruments GigaStor 114ff manuale d’uso - BKManuals

Network Instruments GigaStor 114ff manuale d’uso

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146

Vai alla pagina of

Un buon manuale d’uso

Le regole impongono al rivenditore l'obbligo di fornire all'acquirente, insieme alle merci, il manuale d’uso Network Instruments GigaStor 114ff. La mancanza del manuale d’uso o le informazioni errate fornite al consumatore sono la base di una denuncia in caso di inosservanza del dispositivo con il contratto. Secondo la legge, l’inclusione del manuale d’uso in una forma diversa da quella cartacea è permessa, che viene spesso utilizzato recentemente, includendo una forma grafica o elettronica Network Instruments GigaStor 114ff o video didattici per gli utenti. La condizione è il suo carattere leggibile e comprensibile.

Che cosa è il manuale d’uso?

La parola deriva dal latino "instructio", cioè organizzare. Così, il manuale d’uso Network Instruments GigaStor 114ff descrive le fasi del procedimento. Lo scopo del manuale d’uso è istruire, facilitare lo avviamento, l'uso di attrezzature o l’esecuzione di determinate azioni. Il manuale è una raccolta di informazioni sull'oggetto/servizio, un suggerimento.

Purtroppo, pochi utenti prendono il tempo di leggere il manuale d’uso, e un buono manuale non solo permette di conoscere una serie di funzionalità aggiuntive del dispositivo acquistato, ma anche evitare la maggioranza dei guasti.

Quindi cosa dovrebbe contenere il manuale perfetto?

Innanzitutto, il manuale d’uso Network Instruments GigaStor 114ff dovrebbe contenere:
- informazioni sui dati tecnici del dispositivo Network Instruments GigaStor 114ff
- nome del fabbricante e anno di fabbricazione Network Instruments GigaStor 114ff
- istruzioni per l'uso, la regolazione e la manutenzione delle attrezzature Network Instruments GigaStor 114ff
- segnaletica di sicurezza e certificati che confermano la conformità con le norme pertinenti

Perché non leggiamo i manuali d’uso?

Generalmente questo è dovuto alla mancanza di tempo e certezza per quanto riguarda la funzionalità specifica delle attrezzature acquistate. Purtroppo, la connessione e l’avvio Network Instruments GigaStor 114ff non sono sufficienti. Questo manuale contiene una serie di linee guida per funzionalità specifiche, la sicurezza, metodi di manutenzione (anche i mezzi che dovrebbero essere usati), eventuali difetti Network Instruments GigaStor 114ff e modi per risolvere i problemi più comuni durante l'uso. Infine, il manuale contiene le coordinate del servizio Network Instruments in assenza dell'efficacia delle soluzioni proposte. Attualmente, i manuali d’uso sotto forma di animazioni interessanti e video didattici che sono migliori che la brochure suscitano un interesse considerevole. Questo tipo di manuale permette all'utente di visualizzare tutto il video didattico senza saltare le specifiche e complicate descrizioni tecniche Network Instruments GigaStor 114ff, come nel caso della versione cartacea.

Perché leggere il manuale d’uso?

Prima di tutto, contiene la risposta sulla struttura, le possibilità del dispositivo Network Instruments GigaStor 114ff, l'uso di vari accessori ed una serie di informazioni per sfruttare totalmente tutte le caratteristiche e servizi.

Dopo l'acquisto di successo di attrezzature/dispositivo, prendere un momento per familiarizzare con tutte le parti del manuale d'uso Network Instruments GigaStor 114ff. Attualmente, sono preparati con cura e tradotti per essere comprensibili non solo per gli utenti, ma per svolgere la loro funzione di base di informazioni e di aiuto.

Sommario del manuale d’uso

  • Pagina 1

    1 rev. 1 GIGAST OR ™[...]

  • Pagina 2

    [...]

  • Pagina 3

    3 rev. 1 GigaS to r U ser Guide[...]

  • Pagina 4

    4 rev. 1 Trademark Notices ©2008 Netwo rk Instru ments,® L LC. All rig hts reserv ed. Network Instruments, Observer® Gen2,TM and all associated logo s are trademarks or registered trademarks of Network Instruments, LLC. Open Source Copyright Notices Portions of this product includ e softwa re develope d by the OpenSSL Project fo r use in the Ope[...]

  • Pagina 5

    5 rev. 1 Limited Warranty—Software Network Instruments, LLC (“DEVELOPER”) warrants that for a pe riod of sixty (60 ) days from the date of shipment from DEVELOPER: (i) the media on which the SOFT WARE is furnished will be free of de fects in materials and workmans hip under normal use; and (ii) the SOFTWARE substantially conforms to its publi[...]

  • Pagina 6

    6 rev. 1 Ownership and Confidential ity END-USER ag rees that Networ k Instrument s, LLC owns all relevant copyr ights, tr ade secrets and al l intellectua l property related to the SOFTWARE. End User License Agreement (EULA) PLEASE READ THIS SOFTWARE LICENSE AGREEMENT CARE FULLY BEFORE DOWNLOADING OR USING THE SOFTWARE. BY CLICKING ON THE “ACCEP[...]

  • Pagina 7

    7 rev. 1 Technical Support Network Instrume nts provid es techn ical sup port by ph one (d epending on where you are l ocated): US & countries outside Eu rope at (952) 358-380 0 UK and Euro pe at +44 (0) 19 59 569880 By fax (depending on where you are located): US & countries outside of Europe at (952 ) 358-3801 UK and Euro pe at +44 (0) 19[...]

  • Pagina 8

    8 rev. 1[...]

  • Pagina 9

    9 rev. 1 Co n t e n t s Chapter 1: About the GigaStor GigaStor ve rsions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Chapter 2: Installing Your GigaStor Unpacking and inspectin g the parts . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Pagina 10

    10 rev. 1 Tapping a WAN co nnection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 T1/E1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 DS3/E3 . . . . .[...]

  • Pagina 11

    11 rev. 1 Chapter 7: Observer on the GigaStor Using the Observer co nsole loc ally on th e GigaStor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 0 8 Chapter 8: Probe Instances What is a p robe inst ance? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Pagina 12

    12 rev. 1[...]

  • Pagina 13

    Chapter 1 About the GigaStor 13 rev. 1 C h a p t e r 1 A b out the GigaSt or[...]

  • Pagina 14

    GigaStor versions Chapter 1 About the GigaStor 14 rev. 1 GigaStor v ersions The GigaStor is an e nterprise-strength network prob e appliance . The GigaStor combines a multi-teraby te , high-performance Redundant Array of Independent Disks (RAID) with a dedicated, high-speed network cap ture card in a mo dular , easy-to-deplo y appliance . There are[...]

  • Pagina 15

    GigaStor versions Chapter 1 About the GigaStor 15 rev. 1 possible to us e the same probe to monitor different ty pes of links as needed. For example , you can easily convert the capture c ard from optical to copper , allowi ng you to connect the GigaS tor to different test access points (T APs) or switch port analyzer (SP AN) or mirror interfaces .[...]

  • Pagina 16

    GigaStor versions Chapter 1 About the GigaStor 16 rev. 1[...]

  • Pagina 17

    Chapter 2 Installing Your Giga Stor 17 rev. 1 C h a p t e r 2 Installing Y our GigaSt or[...]

  • Pagina 18

    Unpacking and inspecting the parts Chapter 2 Installing Your GigaStor 18 rev. 1 The gener al steps to in stall your GigaStor a re: F “Unpacking and inspecting the parts” on page 18 F “Installing the GigaStor and co nnecting the cables” on page 19 F “Connecting Observer to the GigaStor” on page 22 Additional steps to comple te the ins ta[...]

  • Pagina 19

    Installing the GigaStor and connecting the cable s Chapter 2 Installing Your Giga Stor 19 rev. 1 Installing the GigaSt or and connec ting the cables 1 Install the GigaStor and any expans ion units in to your rack using the supplied r ails . Instructio ns for installing the r ail kits ar e provided in the r a il kit box. 2 Install the driv es into t[...]

  • Pagina 20

    Setting the GigaStor’s IP address Chapter 2 Installing Your GigaStor 20 rev. 1 4 Ensure that each drive’s power/activit y light is lit. If a drive’s light is not lit, it is likely that the dr ive is not seated properly . T urn off the GigaStor and reseat the driv es . For more information, see “Installing the d rives in your G igaStor” on[...]

  • Pagina 21

    Setting the GigaStor’s IP address Chapter 2 Installing Your Giga Stor 21 rev. 1 F igure 3 Probe Ser vice Configuration Applet 10 The Probe Administration wi ndow opens . Click the P robe Options tab (Figure 4). Fi g u re 4 P ro b e O pt i o n s 11 Change the name of the probe to something meaningful to yo u. The name might be th e physical locati[...]

  • Pagina 22

    Connecting Ob server to the Gi gaStor Chapter 2 Installing Your GigaStor 22 rev. 1 C onnec ting Obser ver to the GigaStor This section assumes you ha ve already installed Observer on your desktop or laptop . If not, install th e software . Y ou can d ownload fr om the Network Instrument s website . There are three main ta sks to connect O bserv er [...]

  • Pagina 23

    Connecting Observer to the GigaStor Chapter 2 Installing Your Giga Stor 23 rev. 1 F igure 6 Edit Remote P robe Entr y 4 T ype the IP address that you assi gned to the GigaStor in step 7 in “Setting the GigaStor’s IP addres s” on page 19 and click OK. Y ou may leave the other fields blank. If you ty pe a name , the na me will change after Obse[...]

  • Pagina 24

    Connecting Ob server to the Gi gaStor Chapter 2 Installing Your GigaStor 24 rev. 1 Fi g u re 8 P ro b e I n s t a n ce R e d i re c ti o n 6 Select the probe instance and clic k Redirect Selected Instance . Figure 9 appears . F igure 9 Redirecting Pr obe or P robe Instance 7 Choose the “Redirect to this Observer” optio n, then click the Redirec[...]

  • Pagina 25

    Connecting Observer to the GigaStor Chapter 2 Installing Your Giga Stor 25 rev. 1 1 Click Probe Admini stration (see Figure 7). The Probe Administr ation Login wind ow opens . F igure 10 Remote P robe A dministration 2 Ensure “Login using a user account configured for this Probe” is selected and click OK. The Probe Administration wi ndow opens [...]

  • Pagina 26

    Connecting Ob server to the Gi gaStor Chapter 2 Installing Your GigaStor 26 rev. 1 By default all of the installed memory on th e GigaStor is dedicated for one probe instance . Y ou must first release the memory so that you can assign the freed memory to other probe instances . 4 W ith the newly renamed probe instance still selected, cli ck Configu[...]

  • Pagina 27

    Connecting Observer to the GigaStor Chapter 2 Installing Your Giga Stor 27 rev. 1 Fi g u re 13 G ig a S t o r I n s t a n ce s 7 Click New Instance . Figure 14 appears . F igure 14 Edit Pr obe I nstance: Name 8 Y ou are configuring a Gi gaStor probe to capture data and write it to the hard drive . Therefore en sure “Probe instan ce” is selected[...]

  • Pagina 28

    Connecting Ob server to the Gi gaStor Chapter 2 Installing Your GigaStor 28 rev. 1 Figure 1 5 Ed it Prob e I nst ance : Con fig ure M em or y 9 F rom the RA M that you released ea rlier , assign some of it to this probe instance and click Next. 10 Ensure the correct network adapte r is se lected and click Finish to redirect the GigaStor to yo ur lo[...]

  • Pagina 29

    Connecting Observer to the GigaStor Chapter 2 Installing Your Giga Stor 29 rev. 1 11 Repeat step 7 through st ep 10 unti l you have created all of your probe instances . Any unus ed memory should be reallocated to the packet capture buffer of the act ive probe instance or to the operating system. 12 Click OK to close the Probe ad ministration windo[...]

  • Pagina 30

    Connecting Ob server to the Gi gaStor Chapter 2 Installing Your GigaStor 30 rev. 1 F igure 18 G igaStor Setting s Schedule tab 3 In the Sched ule GigaStor Captu re section, selec t Always . For more information about a packet cap ture vs . GigaStor capture , see “P acket Capture or GigaS tor Capture” o n page 53. 4 In the Reserve scheduling for[...]

  • Pagina 31

    Configuring Observer for your Gigabit device Chapter 2 Installing Your Giga Stor 31 rev. 1 C onfiguring Obser v er for y our Gigabit devic e Depending o n your probe and your network, you may need to mak e some changes from th e factory defaults . Q “J umbo Fr ame Support (Gigab it Ethe rnet)” on page 3 1 Q “Configuring T erms of Service and [...]

  • Pagina 32

    Configuring Observer for your Gi gabit device Chapter 2 Installing Your GigaStor 32 rev. 1 F igure 19 Gigabit tab C onfiguring T erms of Ser vice and Quality of Ser vic e settings The T oS/QoS settings are co nfigu red for each probe . 1 Select the gigabit prob e and right-click. A menu appe ars . C hoose Probe or Device Settings . 2 Click the T o [...]

  • Pagina 33

    Configuring Observer for your WAN device Chapter 2 Installing Your Giga Stor 33 rev. 1 F igure 20 T oS/Q oS tab C onfiguring Obser v er for y our W AN devic e There are a number of se tup options and statistical displays u nique to W AN Observ er , which are d escribe d in the following sub sections . Before you can analyze the W AN link, you must [...]

  • Pagina 34

    Configuring Observer for your WAN device Chapter 2 Installing Your GigaStor 34 rev. 1 Digital DS3/E3/HSSI Probe Settings T o access the probe settings , select the probe , right-click and choose Probe or Device S ettings . Th en click the DS3/E3/HSSI ta b (Figure 21). F igure 21 DS3/E3/HSSI Probe Settings T able 1 descri bes fields in Figure 21. Ta[...]

  • Pagina 35

    Configuring Observer for your WAN device Chapter 2 Installing Your Giga Stor 35 rev. 1 Digital T1/E1 Pr obe S ettings T o access the probe settings , select the probe , right-c lick and choose Probe or Device Settings . Then click the T1/E1 tab (Figure 22). F igure 22 T1/E1 W AN P robe Settings T able 2 descri bes fields in Figure 22. T able 2 T1/E[...]

  • Pagina 36

    Configuring Observer for your WAN device Chapter 2 Installing Your GigaStor 36 rev. 1 Ser ial T1 /E1 P robe Setti ngs T able 3 describes fi elds fo r a serial T1/E1 connection. Table 3 Serial T1 /E1 probe settings Setting Explanation WAN/Frame Relay Type Choose T1 or E1 t o match the type of link you are analyzing. Encapsulation You must set this t[...]

  • Pagina 37

    Tapping an Ethernet or Fibre Channel connection Chapter 2 Installing Your Giga Stor 37 rev. 1 T apping an Ethernet or F ibre Channel c onnec tion This section describes how to connect the cables for these environments: Q “10/100/10 00, 10GbE Optical, and Fibre Channel” on page 37 Q “Gigabit copper” on page 40 10/100/1000, 10GbE Optical, and[...]

  • Pagina 38

    Tapping an Ethernet or Fibre Channel connection Chapter 2 Installing Your GigaStor 38 rev. 1 F igure 23 Gen2 car d por t assignments 6 Use the supplied Ethernet cable to connect the ne twork interfa ce card in the GigaStor to the network. N OTE : S TRAIGH T - THROUGH C ABLE If you are using a switch ’s SP AN/ mirror port, no n TA P i s required. [...]

  • Pagina 39

    Tapping an Ethernet or Fibre Channel connection Chapter 2 Installing Your Giga Stor 39 rev. 1 F igure 24 GigaSto r with an optical n TA P TX RX Gigabit Switch (DCE) Server (DTE) 10/100/1000 NIC for TCP/IP Gen2 GigaStor or GigaStor Expandable Optical TAP Observer Console RX TX RX[...]

  • Pagina 40

    Tapping an Ethernet or Fibre Channel connection Chapter 2 Installing Your GigaStor 40 rev. 1 Gigabit c opper The Gigabit copper kit includes: Q Copper n TA P Q 1, 2, or 4 standard Ethernet cables Q 2, 4, or 8 analyzer ca bles T o connect the T AP to the GigaStor: 1 Insert the supplied SFP connectors into the open sl ots on the back of the Gen2 card[...]

  • Pagina 41

    Tapping an Ethernet or Fibre Channel connection Chapter 2 Installing Your Giga Stor 41 rev. 1 6 Use the supplied Ethernet cable to connect the ne twork interfa ce card in the GigaSto r to the network. N OTE : P ASS - THR OUGH C ABLE If you are using a switch ’ s SP AN/mirror port, no n TA P i s required. Simply p lug any straight-through Eth erne[...]

  • Pagina 42

    Tapping a WAN connection Chapter 2 Installing Your GigaStor 42 rev. 1 T apping a W AN connec tion This section describes how to connect the cables for these environments: Q “T1/E1” on page 42 Q “DS3/E3” on page 46 T1/E1 See “Digital” on page 42 or “Serial” on page 44 de pending on y our needs . Digital The digital T1/E1 kit includes[...]

  • Pagina 43

    Tapping a WAN connection Chapter 2 Installing Your Giga Stor 43 rev. 1 Now that you ha ve physically conn ected the cables fo r the GigaStor, you must now configu re its softw are . See “Setting the GigaStor’s IP address” on page 19. Figure 27 shows the GigaStor as it would be cabled to analyze T1/E1 link with a Channel Serv ice Unit/Data Se [...]

  • Pagina 44

    Tapping a WAN connection Chapter 2 Installing Your GigaStor 44 rev. 1 Serial The serial T1/E1 kit includes: Q One se rial T1/E 1 W AN T AP Q One serial Y cable Q One serial T1 W AN cable 1 If you have a GigaSt o r Expand able , see “Con necting the GigaStor Expandable to th e expansion unit s” on page 52 for deta ils about connecting them. Afte[...]

  • Pagina 45

    Tapping a WAN connection Chapter 2 Installing Your Giga Stor 45 rev. 1 F igure 28 W AN Seria l T1/E1 T AP Router (DCE) CSU/DSU (DTE) 10/100/1000 NIC for TCP/IP GigaStor or GigaStor Expandable Serial T1/E1 TAP Observer Console POWER DTE DCE ACTIVE OUTPUT MODE AB[...]

  • Pagina 46

    Tapping a WAN connection Chapter 2 Installing Your GigaStor 46 rev. 1 DS3/E3 See “Digital” on page 46 or “Seria l/HSSI” on page 48 depend ing on your needs . Digital The digital DS3/E3 kit includes: Q One digital DS3/ E3 T AP Q One digital DS3/E3 W AN cable Q T wo full -duplex D S 3/E3 coax cables 1 If you have a GigaSt o r Expand able , se[...]

  • Pagina 47

    Tapping a WAN connection Chapter 2 Installing Your Giga Stor 47 rev. 1 Fi g u re 29 D S3 / E 3 T A P POWER DTE E3 LOF LOS IN OUT DCE LOF LOS IN OUT OUT (TX) IN (RX) RX RX DS3 Line (DCE) CSU/DSU (DTE) 10/100/1000 NIC for TCP/IP GigaStor or GigaStor Expandable DS3 TAP Observer Console IN (RX) OUT (TX) TX TX[...]

  • Pagina 48

    Tapping a WAN connection Chapter 2 Installing Your GigaStor 48 rev. 1 Serial/HSSI The serial DS3 kit includes: Q One seri al DS3/E3 T A P Q One HSSI Y -cable Q One HSSI cable Q One Ethernet cable 1 If you have a GigaSt o r Expand able , see “Con necting the GigaStor Expandable to th e expansion unit s” on page 52 for deta ils about connecting t[...]

  • Pagina 49

    Tapping a WAN connection Chapter 2 Installing Your Giga Stor 49 rev. 1 F igure 30 W AN HSSI Router (DCE) CSU/DSU (DTE) 10/100/1000 NIC for TCP/IP GigaStor or GigaStor Expandable HSSI TAP Observer Console HSSI IN HSSI OUT[...]

  • Pagina 50

    Installin g the driv es in your GigaStor Chapter 2 Installing Your GigaStor 50 rev. 1 Installing the driv es in y our GigaStor C AUTI ON H ANDLING THE D RIVE S Be especially careful when handling and installing the hard drives . P roper handli ng is paramount to the longevity of the unit. The internal mechanis m of the hard drive can be seriousl y [...]

  • Pagina 51

    Installing the drives in your GigaStor Chapter 2 Installing Your Giga Stor 51 rev. 1 Figure 31 shows how the dr ive numbers correspond to slot locations . F igure 31 GigaStor drive locations C AUTI ON G IGA S TOR E XPAN DA BL E D RIVE L OCAT ION It is impo rtant th at you install th e drives in the correct drive slot, and in correct expa nsion unit[...]

  • Pagina 52

    Installin g the driv es in your GigaStor Chapter 2 Installing Your GigaStor 52 rev. 1 C onnec ting the GigaStor Expand able to the expansion units After you have installed the drives Use the supplied cables to connect the expansion units to the GigaStor Expandable . Figure 32 shows how to cable the GigaSto r Expandab le to the expansion units . F i[...]

  • Pagina 53

    Chapter 3 Packet Capture or GigaStor Capture 53 rev. 1 C h a p t e r 3 P ack et Captur e or GigaSt or Captur e[...]

  • Pagina 54

    Capturing Packets with the GigaStor Chapter 3 Packet Capture o r GigaStor Capture 54 rev. 1 C apturing Pa ckets with the GigaS tor A GigaStor can accumulate terabytes of stored network tr affic . T o manage the sheer volume of da ta, the GigaStor includes an alternative , spec ialized capture and analysis control pan el. The GigaStor Control P anel[...]

  • Pagina 55

    Packet capture buffer and statistics buffer Chapter 3 Packet Capture or GigaStor Capture 55 rev. 1 However , if you are pushing the li mits of the system on which the probe is installed by creating many probe instances , you may be able to a void some performance problems by fine-tuning the memory allocation for each probe instance . F or example ,[...]

  • Pagina 56

    Packet capture buffer and statistics buffer Chapter 3 Packet Capture o r GigaStor Capture 56 rev. 1[...]

  • Pagina 57

    Chapter 4 GigaStor Control Panel 57 rev. 1 C h a p t e r 4 GigaS tor C o n trol P anel[...]

  • Pagina 58

    Chapter 4 GigaStor Control Panel 58 rev. 1 Once the GigaS tor is up and running on the n etwork, you can run Expert Observer or Observer Su ite to connect to the GigaStor running as a probe to begin analyzin g the network, or you can run the GigaStor in Console mode via Wi ndows T erminal Server (or a monitor and keyboard that are phys ically attac[...]

  • Pagina 59

    Display Contr ols Chapter 4 GigaStor Control Panel 59 rev. 1 etc ., by clicking on the ap propri ate tab and selecting the items you want to see on the time li ne chart. Displa y C ontrols Charts and statistical tables are refreshed on ly when you click the Update Chart or Update Statistics b utton. The buttons will flash with a red border when a r[...]

  • Pagina 60

    Right-click menus Chapter 4 GigaStor Control Panel 60 rev. 1 Right- click menus As with other Observer disp lays , th e charts and tables of the GigaStor control pan el offer many right-cl ick shortcuts . Q Right-clicking on the chart po rtion of the C ontrol P anel displays th e following o ptions for navigating and di splaying tr affic data: F ig[...]

  • Pagina 61

    Analyze button Chapter 4 GigaStor Control Panel 61 rev. 1 Analy ze but ton F igure 36 Giga Stor Contr ol P anel Analyze button When you click the Analyze button to view the results , you are prompted to select how to filter the packet captu re for display (Figure 37). After you click OK, any filters you have chosen are applied, and a standard deco [...]

  • Pagina 62

    Analyze button Chapter 4 GigaStor Control Panel 62 rev. 1 F igure 37 Gig aStor Analysis Options wind ow T able 4 describes what the fields in the various sections control. Table 4 GigaStor Analysis Options Field section Description GigaStor Analysis Filter Choose whether to Analyze all traffic in the analysis period, Select an Observer filter to ap[...]

  • Pagina 63

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 63 rev. 1 C onfiguring the GigaS tor through the C ontrol P anel Ju st as with the standard Observer pac ket capture interface , you c an set the colors of the capture graph and schedule captures to be automatically launched (o r to run all the time). In addition, t[...]

  • Pagina 64

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 64 rev. 1 GigaStor Options tab This tab lets you c onfigure many op tions for the GigaStor. Follow the instructions in “C onfiguring the GigaS tor through the Contro l P anel” on page 63 to open the G igaStor Options tab (Figure 39). F igure 39 GigaStor Options[...]

  • Pagina 65

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 65 rev. 1 Table 5 GigaStor Options tab Field Description Capture Buffer size Allows you to se t the amount of Windows memory that Observer will dedicate to th e capture buffe r cache for this instance. Values are in megabytes. This configuration value has been pre-s[...]

  • Pagina 66

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 66 rev. 1 Start/Stop Packet Capture marker frames When checked, saved pa cket capt ure buffers will include markers that timest amp when packet capt ures were started and stopped. Wireless Channel Change When checked, saved pa cket capture buffers will include mark[...]

  • Pagina 67

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 67 rev. 1 GigaStor Char t tab This tab lets you c hoose the app earance , colors , and scale of the GigaStor Control P anel’s time line ch art. Follow the instructions in “Configurin g the GigaStor thro ugh the Control P anel” on pag e 63 to open the GigaStor [...]

  • Pagina 68

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 68 rev. 1 F igure 41 GigaStor Outline[...]

  • Pagina 69

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 69 rev. 1 C apture Graph tab Click Settings and the tab for the ty pe of graph or chart for which you want to set the display properties . Follow the instructions in “Configurin g the GigaStor thro ugh the Control P anel” on pag e 63 to open the Capture Gr aph t[...]

  • Pagina 70

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 70 rev. 1 GigaStor Schedule tab This tab lets you sch edule GigaSto r pa cket captures to occur at preset times and days of the week. Althoug h the dialog looks identical to the standard P acket C apture schedule ta b , the two ty pes of schedules can not be in eff[...]

  • Pagina 71

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 71 rev. 1 Q Choose D aily at specified times or By day -of-week at specified times to automatical ly schedule packet captures during the s pecified time inte rv als (which you can add by clicking the Add bu tton at th e bottom of the dialog; see below). Add ing, Mod[...]

  • Pagina 72

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 72 rev. 1 F igure 44 Statistics Lists tab Subnet Y ou can specify subnet properties for the GigaStor. Follow the instructions in “C onfiguring the GigaS tor through the Contro l P anel” on page 63 to open the Su bnet tab (Figure 4 5). Use the Add, Delet e , Mod[...]

  • Pagina 73

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 73 rev. 1 F igure 45 GigaSt or Subnet tab Figure 46 shows how the su bnet settings show up in the GigaStor Control P anel. They appear on the IP Stations tab .[...]

  • Pagina 74

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 74 rev. 1 F igure 46 Subne t and IP Stations[...]

  • Pagina 75

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 75 rev. 1 Giga Stor r eports There are several default reports a vailable for you. 1 F ollo w the instructions in “Confi guring the GigaS tor through the Control P anel” on pag e 63 to open the GigaStor Reports tab (Figure 47). F igure 47 GigaSt or Repor ts tab [...]

  • Pagina 76

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 76 rev. 1 F igure 48 R epor t Setup 3 Use the arrow butto ns to position graphs and tables on your report . 4 Double-click a section of the report to modify its caption, detail, and number format (Figure 48). Fi g u re 49 Tab l e S e t u p[...]

  • Pagina 77

    Configuring the GigaStor through the Control Panel Chapter 4 GigaStor Control Panel 77 rev. 1 Expor t Y ou can export your GigaS tor-collected data on a sc heduled basis . Use the Export tab to configure when an d to where your data is saved or to manually exp ort your data. F ollo w the instruction s in “Configuri ng the GigaStor th rough the Co[...]

  • Pagina 78

    Configuring the GigaStor through the Control Pane l Chapter 4 GigaStor Control Panel 78 rev. 1[...]

  • Pagina 79

    Chapter 5 Using Observer with a WAN Probe 79 rev. 1 C h a p t e r 5 U sing Obser v er with a W AN Probe[...]

  • Pagina 80

    Discover Network Names Chapter 5 Using Observer with a WAN Probe 80 rev. 1 In general, the W AN analysis works much like Ethernet analysis . One difference is that, when appropriate , Observer identifies W AN link s by their Data Link Connection Identi fier (DLCI) r ather than by MAC address as is done with standard pr otocol analysis . In a dditio[...]

  • Pagina 81

    Discover Network Name s Chapter 5 Using Observer with a WAN Probe 81 rev. 1 T o set the CIR for a DLCI or group of DLCIs 1 Choose T ools → Discover Netw ork Names . The Discover Network Names p ane opens . 2 In the pane , click the edit DLCI CIR button on the Discover Network Names mode window (Figure 51). F igure 51 Edit DCLI 3 Click Add to add [...]

  • Pagina 82

    WAN Bandwidth Utilization Chapter 5 Using Observer with a WAN Probe 82 rev. 1 5 Click OK when you are done . For encapsulations th at do not use DLCI (such as X.25), the correct address v alue is shown even though it is still labeled DLCI. W AN Bandwidth Utilization T o see the percentages of bandwid th satur ation on DCE, DTE and DCE+DTE (Summary)[...]

  • Pagina 83

    WAN Vital Signs by DLCI Chapter 5 Using Observer with a WAN Probe 83 rev. 1 W AN V ital Signs by DL CI In Observer , the Network Vi tal Sign s display is replaced by the W AN V ital Signs by DLCI mode . This mode provides a summary of the errors occurring o n a W AN link (E1/T1/D S3/E3). Choose S tatistics → W A N Vital Signs by DLC I. Y ou can c[...]

  • Pagina 84

    WAN Load by D LCI Chapter 5 Using Observer with a WAN Probe 84 rev. 1 WA N L o a d b y D LC I In a W A N installation, Observer’ s N etwork Activity Display is called W AN Load by DLCI. This mode show s critical W AN transfer r ate and congestion statistics in a n umber of formats . This display can show you the health of a W A N link at a glance[...]

  • Pagina 85

    WAN Load by DLCI Chapter 5 Using Observer with a WAN Probe 85 rev. 1 Fi g ur e 55 WAN L o a d b y D LCI The W AN Load by DLCI mode can be viewed as a dial, graph, or list display . Except f or list view , there are no setu p options for W AN Load by DLCI mod e . Eve ry view includ es a dropdown box that lets you select which DLCI you want to monito[...]

  • Pagina 86

    WAN Top Talkers Chapter 5 Using Observer with a WAN Probe 86 rev. 1 F igure 57 W AN Load by DL CI Graph View The W AN Load display in graph view shows these same statistics (transfer r ate , CRC error rate , and FECN/BEC N frame r ates) as superimposed spike meters . The Committed Informat ion Rate (CIR) is also shown, allowing you to view the netw[...]

  • Pagina 87

    WAN Filtering Chapter 5 Using Observer with a WAN Probe 87 rev. 1 second, etc .) that apply to W AN is a subset of th ose a vailable for standard network analysis . F or encap sulations that do not use DLCI (such as X.25), the co rr ect address value is show n even though it is still labeled DLCI. 1 Choose Statistics → To p Ta l k e r s S t a t i[...]

  • Pagina 88

    Triggers and Alarms Chapter 5 Using Observer with a WAN Probe 88 rev. 1 Fi g u re 59 A c ti v e Fi l t e r s T riggers and Alarms W AN Observ er adds W AN-relate d criteria to the standard T riggers and Alarms mode . 1 Click the A larm Settings button loc at ed in the lower left corner of Observer’ s main window . F igure 60 Alarm Settings A dial[...]

  • Pagina 89

    Trigge rs and Alar ms Chapter 5 Using Observer with a WAN Probe 89 rev. 1 F igure 61 P robe Alarm Settings 4 Select the alarms you w ant set. 5 Click the T riggers tab to set the cr iteria by which the alarms will be triggered. F igure 62 T riggers tab[...]

  • Pagina 90

    Triggers and Alarms Chapter 5 Using Observer with a WAN Probe 90 rev. 1 Most W A N alarms can be set on the DT E or DCE side or b oth. The Committed Informatio n Rate display ed is that which yo u set in Discover Network Names mode . See “Setting the Committed Information Rate (CIR) for a DLCI” on page 80. 6 Click the A ctions tab to defi ne ac[...]

  • Pagina 91

    Chapter 6 Forensic An alysis us ing Snort 91 rev. 1 C h a p t e r 6 F orensic A naly sis using Snor t[...]

  • Pagina 92

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic Analysis using Snort 92 rev. 1 F orens ic Analysis , exclusive to the G igaStor version of Observer , is a powerful tool for s canning hig h-volume pa cket captur es for intru sion signatures and other traf fic patterns that can be specified using the familiar Snort ru le syntax. Y ou [...]

  • Pagina 93

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic An alysis us ing Snort 93 rev. 1 that of native Snort. When you import a set of Snort rul es that includes configuration settings , Obse rver imports rules classifications , but uses its ow n defaults fo r the preprocessor set tings . N OTE : There is a differen ce between enabling the[...]

  • Pagina 94

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic Analysis using Snort 94 rev. 1 F igure 64 Gig aStor Analysis Opti ons - Forensic Analy sis section If you already have a forensic analys is profile , you choo se the profile from the Profile list (Figure 64) an d click OK. For more information about the analysis output, see: Q “ Abou[...]

  • Pagina 95

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic An alysis us ing Snort 95 rev. 1 F igure 66 GigaStor Analysis Options 3 Select the profile that y ou want or click Edit. 4 Click the Se ttings Profile Edit bu tt on to view and define the fields as you need. The fields are describe d in full in “F orensic Analys is Profile Settings t[...]

  • Pagina 96

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic Analysis using Snort 96 rev. 1 If this is the first time forensic an alysis has been run, you must import some rules . 5 Click the Import Sn ort Files button to displ ay a file selection dialog . Browse to the director y where the rules y ou wish to import are located and select them .[...]

  • Pagina 97

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic An alysis us ing Snort 97 rev. 1 Fi g u re 69 R ul e s t a b 9 Select the boxes n ext to the rule s you want to enable . The right- click menu has options to enabl e/disable all rules , and to show the actual Snort rule that w as im ported. It also lets y ou jump to web- based threat r[...]

  • Pagina 98

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic Analysis using Snort 98 rev. 1 10 Click OK to close the Forensic Analysis Profile dialog . Click OK again to close the Forensic Settings dialog . Click OK to close the GigaStor Analysis Options dialog . Observer applies the rules and f ilters to the capture data and displays the result[...]

  • Pagina 99

    Starting Forensic Analysis using Snort rules Chapter 6 Forensic An alysis us ing Snort 99 rev. 1 results , you may want to adju st preprocess or settings t o eliminate these conditions . In truders often attempt to exceed the limitations of forensi c analysis to hide malic ious content. The right-click menu lets you examin e the rule that triggered[...]

  • Pagina 100

    Forensic Analysis Profile field descriptions Chapter 6 Forensic Analysis using Snort 100 rev. 1 right-click menu. Y ou can also jump to the Deco de display of the packet that triggered the alert. F orensic Analy sis Profile field descriptions This sectio n describes in detail the fields on the Settings and Rules tab . See: Q “F orensic An alysis [...]

  • Pagina 101

    Forensic Analysis Profile field descriptions Chapter 6 Forensic An alysis us ing Snort 101 rev. 1 Table 8 Forensic Analys is Profile Settings tab Field Description Settings Profile Settings Profiles provide a mechanism to save and load different preprocessor settings, and share them with other Observer consoles. IP Flow Packets belong to the same I[...]

  • Pagina 102

    Forensic Analysis Profile field descriptions Chapter 6 Forensic Analysis using Snort 102 rev. 1 TCP Stream Reassembly (Continued) Q Log preprocessor events—Checking this box causes forensic analysis to display all activity generated by the TCP stream assembl y preprocessor to the log. Q Maximum active TCP streams tracked—If this value is set to[...]

  • Pagina 103

    Forensic Analysis Profile field descriptions Chapter 6 Forensic An alysis us ing Snort 103 rev. 1 TCP Stream Reassembly (Continued) Q Reassembly error action—Discard and fl ush writes the reassembl ed stream for analysis, exclud ing the packet that caus ed the error. Insert and flush writes the reassembled stream, but includes the pack et that ca[...]

  • Pagina 104

    Forensic Analysis Profile field descriptions Chapter 6 Forensic Analysis using Snort 104 rev. 1 HTTP URI Normalization (Continued) Q Normalize percent-U encodings—Con vert Micro soft-style %u-encoded characters to standard format. The se cond check box allows you to ena ble logging when such encoding is encountered during preprocessing. Because s[...]

  • Pagina 105

    Forensic Analysis Profile field descriptions Chapter 6 Forensic An alysis us ing Snort 105 rev. 1 ARP Inspection Ethernet uses Address R esolution Prot ocol (ARP) to map IP addresses to a particular machine (MAC) addresses. R ather than continuousl y broadcasting the map to al l devices on the segment, each device maintains its own copy, called the[...]

  • Pagina 106

    Forensic Analysis Profile field descriptions Chapter 6 Forensic Analysis using Snort 106 rev. 1 Rules tab The web site www .snort.org provides S nort rule documentati on, and downloadable rule sets . There are three sets of rules av ailable at www .snort.org: Communi ty Rules (which are av ailable to anyone with a web browser), an d three versions [...]

  • Pagina 107

    Chapter 7 Observer on the GigaStor 107 rev. 1 C h a p t e r 7 Obser v er on the G igaStor[...]

  • Pagina 108

    Using the Observer console locally on the GigaStor Chapter 7 Observer on the GigaStor 108 rev. 1 U sing the Obser ver c onsole locally on the GigaStor Depending on how you want or n eed to use Observer it ca n be either a graphic console to help you analyze your network data or it can be a probe to capture data and to wh i ch other Obs erver consol[...]

  • Pagina 109

    Using the Observer console locally on the GigaStor Chapter 7 Observer on the GigaStor 109 rev. 1 F igure 74 Probe Options 3 In the Service Settings section, cl ear the “Run Probe as a Windows Service” option a nd click OK. Thi s uninstalls the Network Instrumen ts Expert Probe serv ice from Windows . 4 Click Start → Programs → Observer → [...]

  • Pagina 110

    Using the Observer console locally on the GigaStor Chapter 7 Observer on the GigaStor 110 rev. 1 5 Choose Options → Swit ch between Observ er and Expert Probe Interface . The Choose Program Interface window opens . 6 Choose Observer and click OK. Y ou must close Observe r and restart it to swi tch into the con sole interface . Click OK on the mes[...]

  • Pagina 111

    Chapter 8 Probe Instances 111 rev. 1 C h a p t e r 8 Pr obe Instanc es[...]

  • Pagina 112

    What is a pr obe instance? Chapter 8 Probe Instances 112 rev. 1 Wha t is a probe instanc e? T IP ! F or instructions on settin g up a probe instance , see “Probe administration” on page 24. Observer uses probes to capture ne twork data. In some cases you may want or need more than one prob e in a specific location. Y ou can achieve that through[...]

  • Pagina 113

    What is a probe instance? Chapter 8 Probe Instances 113 rev. 1 instances to the Gen2 adapter if at al l possible . A copy of all packets are sent from the ad apter to every passive probe instance attached to it. I f you have several passive probe instances attached to th e Gen2 adapter , the Gen2’ s performance is significantly affected. Instead [...]

  • Pagina 114

    What is a pr obe instance? Chapter 8 Probe Instances 114 rev. 1 N OTE : By default there is one active probe instance for GigaStor. It binds to the networ k adapter an d its ports . If you have a specific need to separate th e adapter’ s ports and monitor them separately , you can do so thro ugh passiv e probe instances or you can create se parat[...]

  • Pagina 115

    Chapter 9 G en2 Capture Card 115 rev. 1 C h a p t e r 9 Gen2 Captur e C ard[...]

  • Pagina 116

    Swapping the Gen2 card’s SFP or XFP interfaces Chapter 9 Gen2 Capture Card 116 rev. 1 The Gen2 card is designed a nd manufactured by Network Instrume nts and i s optimi zed for the GigaStor. The Gen2 card comes in two , four , or eight port model s . This section describes Q “Swapping the Gen2 card’ s SFP or XFP interfaces” on page 116 Q ?[...]

  • Pagina 117

    Configuring virtual adapters o n the Gen2 card Chapter 9 G en2 Capture Card 117 rev. 1 Q P orts 1-4 are monitoring a colle ction of trunked l inks Q The remaining ports are each connected to the SP AN (or mirror) port on a switch In this scenario , it makes sense fo r Observer to view P orts 1-4 as a single data stream and to separate each of the f[...]

  • Pagina 118

    Configuring virtual adap ters on the Gen2 card Chapter 9 Gen2 Capture Card 118 rev. 1 F igure 78 Assign P or t to Virtual Adapter: Default view 3 Select the ports to remove and cl ick Remov e . This places them in the A v ailable P orts list. 4 Change the name of the adapter to something mean ingful to y ou and click OK (Figure 79). F igure 79 Assi[...]

  • Pagina 119

    Configuring virtual adapters o n the Gen2 card Chapter 9 G en2 Capture Card 119 rev. 1 F igure 80 Edit Port Description 9 Repeat step 5 through st ep 8 until you have created all of your virtual adapters and given descript io ns to your port s . The adapters appear in the list of adapters presented when y ou create a probe instance . This allows y [...]

  • Pagina 120

    Viewing the Gen2 card’s properties and finding the board’s ID Chapter 9 Gen2 Capture Card 120 rev. 1 10 Right-click the GigaStor probe and choose Administer Selected Probe from the menu. Log in to the probe . 11 Click the GigaStor Instance s tab along the bottom. 12 F or eac h virtual adapter listed as a passive pr obe in stance that you want t[...]

  • Pagina 121

    Viewing the Gen2 card’s properties and finding the board’s ID Chapter 9 G en2 Capture Card 121 rev. 1 2 In the tree on the left, select Device Ma nager . 3 In the tree on the right, expa nd N etwork Instruments Capture Adapters (Figu re 83). Figure 83 Co mp ute r M ana gem ent wi nd ow 4 Choose N etwork Instruments Gen2 Gigabit C apture Adapter[...]

  • Pagina 122

    Viewing the Gen2 card’s properties and finding the board’s ID Chapter 9 Gen2 Capture Card 122 rev. 1 This tab shows all active physical ports on the Gen2 card and the board’s ID . The “Interr upt enabled” and “DMA enabled” lights are light green when Observer is running and dark green when Observer is not running . C AUTI ON A DVANC E[...]

  • Pagina 123

    Appendix A TCP/IP ports, NAT, and VPN 123 rev. 1 A p p e n d i x A T CP/IP por ts , NA T , and VPN[...]

  • Pagina 124

    TCP/IP ports Appendix A TCP/IP ports, NAT, and VPN 124 rev. 1 This section discusses the TCP/ IP ports , NA T , and V PN . T CP/IP por ts Observer and all Network Ins truments probes use ports 25901 and 25903 to communicate . Th ese ports are register ed ports to Netw ork Instruments . All Network In struments probes init iate connection with Obser[...]

  • Pagina 125

    VPN Appendix A TCP/IP ports, NAT, and VPN 125 rev. 1 F igure 86 NA T If the Observer is outside the network where the probe is ru nning, you must forw ard port 25903 from the Observer’ s address . Y ou must use the NA T outside IP address as th e probe’s IP address when trying to redirect and/or administer the probe f rom Observer. VPN Using VP[...]

  • Pagina 126

    VPN Appendix A TCP/IP ports, NAT, and VPN 126 rev. 1[...]

  • Pagina 127

    Appendix B GigaStor, GigaStor Expandable, and Expansion Unit C ases 127 rev. 1 A p p e n d i x B GigaSt or, GigaStor Expandable , and Expansion Unit C ases[...]

  • Pagina 128

    GigaStor Appendix B GigaStor, GigaStor Expandable, and Expansion Unit Cases 128 rev. 1 GigaS tor Figure 87 shows the front of the GigaStor. F igure 87 GigaStor 13 9 5 1 14 10 6 2 15 11 7 3 16 12 8 4 12 ! 13 9 5 1 14 10 6 2 15 11 7 3 16 12 8 4 12 ! AB CD E F G H I I ndividua l D rive A c tivit y S y ste m Reset Butt on A l ar m Mute Button P ri m ar[...]

  • Pagina 129

    GigaStor Expandable Appendix B GigaStor, GigaStor Expandable, and Expansion Unit C ases 129 rev. 1 GigaStor Expandable C ontroller unit F igure 88 G igaStor Expandable controller P owe r Button Reset Button P owe r LED F an/ T e m perature A l ar m Reset H ard D rive Activit y F an LED T e m perature LED s Table 11 GigaStor Expandable LEDs and Butt[...]

  • Pagina 130

    GigaStor Expandable Appendix B GigaStor, GigaStor Expandable, and Expansion Unit Cases 130 rev. 1 Figure 89 shows the back of the GigaStor Expandable . F igure 89 GigaStor Expandable rear view Expansion unit F igure 90 Expansion unit AB C 1 2 4 3 1 2 4 3 1 2 4 3 Seria l A T A D isk I nter faces ( 3 ) on ly avai l ab l e on G igaStor Ex andab l e P [...]

  • Pagina 131

    GigaStor Expandable Appendix B GigaStor, GigaStor Expandable, and Expansion Unit C ases 131 rev. 1 Figure 91 shows the back of the e xpansion un it. F igure 91 Expansion unit r ear view Table 12 Expansion Unit LEDs and Buttons LED/Button Description Individual Drive Activity These LEDs blink whenever there is activity on the drive in the RAID array[...]

  • Pagina 132

    GigaStor Expandable Appendix B GigaStor, GigaStor Expandable, and Expansion Unit Cases 132 rev. 1[...]

  • Pagina 133

    Appendix C GigaStor Portable 133 rev. 1 A p p e n d i x C GigaStor P or table[...]

  • Pagina 134

    Appendix C GigaStor Portable 134 rev. 1 The portable GigaStor offers full-d uplex packet captu re and analysis at wire speed. Depending on which version y ou ordered, th e system includes everything you need to perform continuo us , in-depth analysis of one of th e following to pologies: Q Gigabit Ethernet Q 10 Giga bit Ether net Q Fibre Channel Q [...]

  • Pagina 135

    Appendix C GigaStor Portable 135 rev. 1 F igure 92 P o rt able Analysis Platform System T our Y our GigaStor includes a number of components . T ake a moment after unpacking the system to ensu re that you received all the parts . Q A ruggedized “portable” PC sy stem with Observer Suite hardware interfaces and drivers for the relev ant topology [...]

  • Pagina 136

    Running Observer passively Appendix C GigaStor Portable 136 rev. 1 F igure 93 P or table GigaStor Gigabit and Fibre C hannel systems ha ve an appropriate copper or optical n T AP installed in the drive bay on the right sid e of the system. W AN system T APs are shi pped separat ely . Running Obser ver passiv ely When analyzing a link using a T AP ,[...]

  • Pagina 137

    Using the portable GigaStor as a probe Appendix C GigaStor Portable 137 rev. 1 Dynamic Host C ontrol Protocol (DHCP). For most applicati ons of Observer , you should assi gn an address to the analyzer rather than depending on the DHCP assignment. U sing the por table GigaStor as a pr obe Although most administr ators usually run the Observer consol[...]

  • Pagina 138

    Using the portable GigaStor as a probe Appendix C GigaStor Portable 138 rev. 1[...]

  • Pagina 139

    Numerics – D Index 139 rev. 1 Legend: ff=Figure, t=Table Inde x Numerics 10 Gigabit Ethernet 14, 37, 116 Gen2 card 37 GigaStor Portable 134 tapping 19 10/100/1000 37 25901 124 25903 124 A alarms WAN 90 Analysis Type 62 ARP Inspection, network forensics preprocessor 105 Assign Port t o Virtual Adapt er 118ff Assign Ports to Virtual Adapter 118ff A[...]

  • Pagina 140

    E–G Index 140 rev. 1 Legend: ff=Figure, t=Table T1/E1 42 WAN alarms 90 WAN statistics 80, 82–83 DCE BECN under CIR 84 DCE FECN under CIR 84 DCE Kbits/s Avg 84 DCE KBits /s Max 84 denial of service 105 DHCP 137 DLCI 80–87 DLCI CIR Setup 81 DMA buffer size 122 DMA copy size 122 DMA enabled 122 DS3 see also HSSI DLCI 83 fractionalized 34 monitor[...]

  • Pagina 141

    H–I Index 141 rev. 1 Legend: ff=Figure, t=Table daughter b oard 38 DMA enabled 122 Fibre Channel 37 filter ports 66 Gigabit 37 Gigabit copper 40 Interrupt enabled 122 mirror port 38 passive probe instance 113 performance 113 port assignments 38ff, 40ff ports 66 probe instance warning 112 properties 120 SFP 14, 116 SPAN port 38 statistics 66 swapp[...]

  • Pagina 142

    L–P Index 142 rev. 1 Legend: ff=Figure, t=Table L LAPB 34–35 load preprocess settings 101 preprocessor 113 M MAC address 105 DLCI instead of 80 excluding 65 statistics 71 Top Talkers 86 MAC address tab 86 MAC stations 58 Make Instance Acti ve 120ff Max Buffer Size 55, 65 megabytes 113 memory management 55 Memory Management tab 25f f mirror port[...]

  • Pagina 143

    Q–V Index 143 rev. 1 Legend: ff=Figure, t=Table Probe Properties T1/E1 Tab 35 Probe Service Configuration Applet 21ff, 108ff Q QLogic 19 Quality of Service 32 R RAID 14, 113–114, 128, 131 RAM see also buffer active probe instance 26 buffer size 113 capture buffer size 65 formula 55 limitations 55 packet capture 55, 112 packet loss 26 probe inst[...]

  • Pagina 144

    W–X Index 144 rev. 1 Legend: ff=Figure, t=Table virtual adapter 114ff probe instances 119–120 Virtual Adapters tab 119ff VPN 125 W WAN alarms 80, 88 analysis 80 analyzing 33 bandwidth 80 CIR 80 congestion 84 DCE 82 DS3/E3 46 DTE 82 E1 42 filtering 87 full duplex 80 GigaStor 15 GigaStor Portable 134, 136 HSSI 49ff monitoring 15 Observer 33 probe[...]

  • Pagina 145

    145 rev. 1[...]

  • Pagina 146

    146 rev. 1 ww w .networkinstruments.c om © 2008 Network Instruments, LL C. All rights r eser ved. Network Instruments , Obser ver , and all associated logos ar e regist ered trademarks of Network Instruments , LL C.[...]