|
Tools to Analyze your Network Traffic
Continued from page: 2
Tuesday, May 15, 2007
OmniPeek Enterprise
Omnipeek Enterprise can work as a distributed network analyzer, when used with
OmniEngines, else it works as a standalone protocol analyzer. With OmniPeek, you
can capture traffic from WAN links, WLAN, 10/100/1000 Ethernet networks, etc.
OmniPeek is easy to use. It gives you a live picture of the network, as soon as
it starts capturing packets. It provides various features like Expert Analysis,
Peer maps, Live graphs of the network, Protocol and node statistics, etc.
Another useful feature that OmniPeek has is Visual expert. It comes with tools
which can be used to do a detailed analysis of the data flows. One of the tools
is Packet Visualize, which shows conversations between a server and a client and
provides expert diagnosis of the conversation with the summary.
OmniPeek's Expert system diagnosis feature lets you identity problems
occurring in the network by the diagnosis of conversations taking place in the
network. It gives a complete analysis of conversation flows with detailed event
logs and node information which can be easily understood and lets you identify
problems quickly. Its expert 'EventFinder' feature gives remedies, descriptions
and likely cause of the problem which is identified by the Expert diagnosis
module.
|
Expert Analysis with OmniPeek |
| In OmniPeek when you start capturing
packets, you can see their live details as and when they were captured. To
see Live Expert analysis of the network, see Hierarchy view in Expert
analysis. It lets you track events and see events as client server or p2p
patterns. The Hierarchy view displays information as data flows between two
nodes, and events that have taken place between the nodes. A green light
just besides the node, means that the node is active, red light denotes that
one or more severe events has taken place associated with that node, while
yellow light indicates minor severity. It also shows the no. of packets
transferred, event taken place, bytes transferred between the nodes and the
duration for which they have been active. Going to the events tab, you can
see the details of the severe events detected. Also you can see the flows
independently in the Flat view option. You can even compare the two flows.

In Expert Analysis, it shows APDEX
score which represents Application performance
The Application view under Expert analysis uses Apdex
(Application performance index), which is an open standard. For Apdex score
you need to define threshold duration. To do this, select the flow on which
you want to apply Apdex and right click. Select event finder settings. In
the popup window expand application option and then the Apdex option. Select
the Apdex score option and in the Apdex threshold duration specify the no.
of seconds. By default threshold duration is 1 second. It will need at least
10 events before it can give you an Apdex score. Next in Expert analysis is
VoIP analysis. Here, you can see details of RTP flows with information about
their related codecs. When you select VoIP media conversation flow you can
see audio encoding (G.711, G.728 etc.) in codec column. Details of the
quality of the audio are presented under MOS (“Mean Opinion Score”). The
quality is quantified on a scale of 0.00 to 5.00. You can see Peer map and
all sorts of graphs about the network statistics under the Visuals option. |
Page(s) 1 2 3 4
|