The Expert analysis in OptiView Protocol Expert automatically detects problems while monitoring real-time traffic, or analyzing captured packets collected by Protocol Expert or OptiView™ Analyzers.
The Expert view categorizes, by OSI Layers, the problems and data flows detected. It summarizes the address or name of the stations involved, the number packets and Bytes transferred, and the position of frames in the capture file that triggered the Expert System to identify the problem.
Traffic statistics for the stations involved are correlated and presented for each OSI layer in an easy-to-read hierarchy by the expected symptoms. This information provides data to isolate problems, eliminating the need to perform tedious, line-by-line packet analysis.
The Expert System will identify symptoms, per OSI layer, including:
- Application Layer: Excessive ARP, Excessive BOOTP, NFS Retransmission, HTTP Get Response, HTTP Post Response, Slow Server Connect, Slow Server Response.
- Transport Layer: Non-responsive station, TCP/IP checksum error, TCP/IP fast retransmission, TCP/IP retransmission, TCP/IP frozen window, TCP/IP long Ack
and TCP/IP SYN attack.
- Network Layer: ICMP Errors and Unstable MST.
- Datalink Layer: Illegal MAC source address, broadcast/multicast storms and physical errors.
Double-clicking on the Expert Symptom button displays the Expert Diagnosis window which provides a description of the station symptom, a probable cause and editable recommended action(s). Select any of the stations listed in the Expert View to get a detailed view of the traffic captured.
