Agilent Technologies Copyright 1999 H7211A+221 v Capture Filters, Logging, and Subnets: Module Objectives Create capture filters that control whether frames are stored in the Advisor capture buffer or not. Set up to log data for baselining and benchmarking. Implement user defined subnet entries to tell the Advisor how to group addresses on your network.

Agilent Technologies Copyright 1999 H7211A+221 v Advisor Block Diagram RISC CPU MAIN CPU C O U N T E R S Network Interface Capture Buffer SYSTEM RAM Windows 98 GUI Specialized Hardware Line Vital Statistics PC Display Filters Max of 26 MB Capture Filters

Agilent Technologies Copyright 1999 H7211A+221 v Configuration (F10)

Agilent Technologies Copyright 1999 H7211A+221 v Capture Filters TCP port 80 Server Address Bad FCS DNS queries RISC CPU MAIN CPU F I L T E R S C O U N T E R S Network Interface Capture Buffer SYSTEM RAM I/O SUBSYSTEM Specialized Hardware Example Filters: Addresses Filter criteria must be matched for frames to enter the capture buffer.

Agilent Technologies Copyright 1999 H7211A+221 v Capture Filters Tab Go to the Capture Filters tab to define hardware filters

Agilent Technologies Copyright 1999 H7211A+221 v Capture Filters: Add Use Capture Filters to control the information going into the Advisor. Description: Capture only frames to or from me Filter is enabled Uses 2 of 16 resources Use Add to create a new filter Graphical display of filter usage

Agilent Technologies Copyright 1999 H7211A+221 v LAN Filters Give your filter a name Optional description Choose whether to include or exclude frames from the buffer. You can also start, center or halt capture when the frame is matched Use LAN Filters tab to define filter

Agilent Technologies Copyright 1999 H7211A+221 v LAN Filters: Creating a Station Filter Advanced Options: Can specify encapsulation, Time to Live value, Next protocol code. Expand Station Filters, Expand Addressing, Enter Addresses, Select boxes to enable. If desired, use Advanced.

Agilent Technologies Copyright 1999 H7211A+221 v Protocol Filters This filter stores IP and Sun and DECnet frames. The “+” indicates more ports and protocols are available. Expand Protocol Filters, Check protocols to include in the filter.

Agilent Technologies Copyright 1999 H7211A+221 v Frame Attributes Frame Attributes Tab: Specify frame errors and values for hex bytes. Or enter text and hex bytes are entered automatically.

Agilent Technologies Copyright 1999 H7211A+221 v Quick Capture Filters Copy from Decodes Summary line and Paste into Capture Filters Copy Paste Capture Filters

Agilent Technologies Copyright 1999 H7211A+221 v Data Logging Go to the Log Tab to set up data logging.

Agilent Technologies Copyright 1999 H7211A+221 v Logging Parameters Connection Statistics and Expert Analyzer log data for each event. The other measurements log data at the specified interval. Select measurements to log to file.

Agilent Technologies Copyright 1999 H7211A+221 v More on Log Files When you log Expert, you are also logging Commentator, Connection Stats, and Protocol Vital Stats. Commentator Connection Stats Protocol Vitals

Agilent Technologies Copyright 1999 H7211A+221 v Workspace Options The last settings of Workspace Options are preserved on exit, and are not changed by merging a new configuration file.

Agilent Technologies Copyright 1999 H7211A+221 v LAN Addresses LAN Address Display options do not apply to Decodes. Use the Display Options available in Decodes right mouse click. Custom subnet definitions LAN Addresses Default subnet definitions Advisor IP address for Active Tests

Agilent Technologies Copyright 1999 H7211A+221 v Subnet Mask Info is an IP address, and is a subnet mask. IP uses numbers (addresses) to identify networks and to identify individual components of networks called hosts (e.g., a workstation or a router) Network Host: Host: Host: These addresses are divided into 4 octets giving a total of 32 bits to work with. The 1’s in a subnet mask mark the network ID and the 0’s mark the hosts = = Given an IP address and a subnet mask, the network number and host number can be determined. This network ID is 10.6, this particular host is

Agilent Technologies Copyright 1999 H7211A+221 v Troubleshooting Using Subnets If no User Defined Subnets were entered, this address would be (Class A) and you would not see that and were separate subnets. These nodes are connected to the subnet ,890 frames: to ,044 frames: to

Agilent Technologies Copyright 1999 H7211A+221 v Install Application

Agilent Technologies Copyright 1999 H7211A+221 v Measurements Settings Measurements

Agilent Technologies Copyright 1999 H7211A+221 v MAC Node Stats: 50 records of 10-second intervals Commentator / Connections Stats: 100 connections and events Decodes: number of frames in capture buffer Protocol Stats Line Vital Stats 200 records of measurement intervals Protocol Vital Stats Windows of Information Note: when examining a log file, all logged records for all logged measurements are available.

Agilent Technologies Copyright 1999 H7211A+221 v LAB 5.1

Agilent Technologies Copyright 1999 H7211A+221 v Module 5: Review You can create capture filters that control whether frames are stored in the Advisor capture buffer or not. You can log data for baselining and benchmarking. User defined subnet entries tell the Advisor how to group addresses on your network.