Document Outline

• Introduction
  • Surveyor Functions
  • Analyzer Devices
  • Protocols Supported
  • What's New in Release 5.0
    • Capture to Disk and THGsE Analyzer Support
    • Disk Caching
    • Capture Management
    • Expanded Multi-QoS Support
    • SMNP Extended Agent
    • New and Enhanced Protocol Decodes
• Installation
  • System Requirements
  • Upgrading Surveyor
  • Installing Surveyor
  • Installing Analyzer Hardware
    • Installing Analyzer Hardware in a Desktop PC
    • Installing Analyzer Hardware in a Notebook PC
    • Installing More Than One Analyzer Card in a Notebook PC
  • Compatibility Matrix
• Getting Started
  • The Surveyor System
    • Launching Surveyor
  • Basic Navigation Tips
  • Buttons and Toolbars
    • Surveyor Toolbar
    • Module Toolbar (Summary View)
    • Detail View Toolbar
    • Data Views Toolbar
    • Filter Design Toolbar
    • Filter States Design Toolbar
    • Capture View Toolbar
  • File Formats
    • .HST Extension – Capture Files
    • .CAP Extension – Internal Capture Files
    • .NAM Extension – Name Table Files
    • .CFD Extension – Capture Filters
    • .DFD Extension – Display Filters
    • .TSP Extension – Transmit Specifications
  • Providing a Name Table to Surveyor
  • Establishing Links for THGm
• Configuring Surveyor
  • Configuring the Interface
    • Customizing Views and Windows
    • Capture View Display Options
    • Histogram Options
    • Setting the Monitoring View for a Module
    • Configuring Chart Views
    • Table Views
  • Module Settings (Properties)
    • Buffer Size
    • Packet Slice (Slicing Size)
    • Stop-and-Save Capture Buffer
    • Modes
    • MAC Control Frame
  • System Settings
    • Configuring Ports to Scan
    • Configuring Remote Communications
    • Protocol Color Coding
    • Setting Update Timers
    • Disk Options
    • Configuring Counter Logging
  • Configuring Alarms
  • Configuring a Multi-Port Tap or Switch
    • Setting the Local COM Port for Taps and Switches
    • Connecting a Tap with THGs or THGsE
  • Settings for Analyzer Devices
    • Resetting an Analyzer Device
    • Updating an Analyzer Device
  • Advanced Configuration
    • surveyor.ini File
    • Customizing Expert Diagnostic Information
    • Assigning Names to Protocols (Monitor)
    • Assigning TCP or UDP Ports to Protocol Parsers
• Resources and Modes
  • Resource Browser
  • Remote Resources
    • Naming Remote IP Resources (Aliases)
    • Resource Protection
  • Modes
  • Hardware Devices
    • Synchronized Resources
  • Hints and Tips for Resources
• Views
  • Summary View
  • Detail View
    • Using Capture + Monitor Mode in Detail View
  • Capture View
    • Capture View Window
    • Creating Filters from Capture View
    • Exporting and Printing Decodes
    • Configuring the Capture View Display
  • Using the Histogram Control
    • Histogram Color Coding
    • Histogram Button Controls
    • Histogram Mouse Controls
    • Saving Portions of the Data
    • Resume Analysis
  • Packet Editor
  • Data Views
    • Ring Statistics View (Token Ring Only)
    • MAC Statistics View (Rx)
    • MAC Statistics View (Tx)
    • Frame Size Distribution View
    • Protocol Distribution View
    • Utilization/Error View
    • Host Table View
    • Network Layer Host Table View
    • Application Layer Host Table View
    • Host Matrix View
    • Network Layer Matrix View
    • Application Layer Matrix View
    • VLAN View
    • Address Mapping View
    • Packet Summary View
    • Duplicate Address View (Expert plug-in only)
    • Expert View (Expert plug-in only)
    • Application Response Time View (Expert plug-in only)
    • Multi-QoS View (Multi-QoS software only)
  • Hints and Tips for Using Views
• Capture and Display Filters
  • Getting Started with the Filter Interface
  • Creating Filters with Filter Templates
    • Creating and Applying a Conversation
    • Creating and Applying a Port Number
    • Selecting Filter Templates
    • Creating Custom Filter Templates
  • Filter Creation
    • Creating Filter Template Combinations
    • Filter Actions
    • Counter Conditions for Filters
    • Frame Types
  • Multi-State and Multi-Statement Filters
    • Filter Structure
    • Filter States
    • Filter Statements
  • Capture and Display Filter Differences
    • Activating Display Filters
    • Activating Capture Filters
  • Filter Examples
    • Filter Example, Capture Conversation
    • Filter Example, Template Combination
    • Filter Example, Capture TCP Port Traffic
    • Filter Example, Advanced Filter
  • Rules of the Capture or Display Filter
  • Hints and Tips for Using Filters
    • Filtering Tips Unique to THG-class Devices
• Transmit Specification
  • Transmit Specifications
    • Transmit Specification Dialog Box
    • Repeating Frames
    • Stream Modes
    • Bursts
    • Transmission Mode
  • Specifying Transmit Data
    • Packet Editor
    • Changing Fields Directly in the Dialog Box
    • Using Templates
    • Creating Templates
  • Transmitting Capture Files
  • Transmit Specification Examples
    • Transmit Specification Example, Bursts
  • Hints and Tips for a Transmit Specification
• Alarms
  • Current Module Alarms
  • Alarm Editor
    • Multi-QoS Alarms
    • Expert Alarms
    • Using Alarms with Different Devices
  • Thresholds and Alarms
  • Alarm Actions
    • Log File Settings
    • E-Mail Settings
    • Pager Settings
    • SNMP Trap Settings
  • Viewing the Alarm List and the Alarm Log
  • Hints and Tips for Alarms
  • Alarm Examples
    • Alarm Example, Utilization
    • Alarm Example, MAC Errors
    • Alarm Example, Frame Size
    • Alarm Example, VoIP Calls
    • Alarm Example, Expert and Application Response
• Expert Features
  • Expert System Views
  • Getting Started with Expert View
    • Expert Overview Details
  • Expert Layers
  • Expert Symptoms, Analyses, and Network Entities
    • Symptoms
    • Analyses
    • Entities
  • Expert Diagnostic Messages
  • Working with the Expert System
    • Configuring the Expert System
    • Module Settings for the Expert System
    • Setting Expert Alarms
    • Customizing Expert Diagnostic Information
    • Exporting Expert Data
    • Printing Expert Data
    • Working with Timestamps
    • Working with Analyzer Devices
  • Application Response Time
  • Application Layer
    • Excessive Mailslot Broadcasts
    • FTP Login Attempts
    • Missed Browser Announcement
    • NCP File Retransmission
    • NCP Read/Write Overlap
    • NCP Request Denied
    • NCP Request Loop
    • NCP Server Busy
    • NCP Too Many File Retransmissions
    • NCP Too Many Requests Denied
    • NCP Too Many Request Loops
    • NFS Retransmissions
    • No HTTP POST Response
    • No Server Response
    • Slow HTTP GET Response
    • Slow HTTP POST Response
    • Slow Server Connect
    • Slow Server Response
    • SMB Invalid Network Name
    • SMB Invalid Password
  • Session Layer
    • No WINS Response
    • TNS Slow Server Connect
    • TNS Slow Server Response
  • Transport Layer
    • Idle Too Long
    • Non Responsive Station
    • TCP Checksum Errors
    • TCP Fast Retransmission
    • TCP Frozen Window
    • TCP Long Ack
    • TCP Repeat Ack
    • TCP Retransmissions
    • TCP RST Packets
    • TCP SYN Attack
    • TCP Window Exceeded
    • TCP Window Probe
    • TCP Zero Window
    • Too Many Retransmissions
  • Network Layer
    • Duplicate Network Address
    • HSRP Coup
    • HSRP Errors
    • HSRP Resign
    • ICMP All Errors
    • ICMP Bad IP Header
    • ICMP Destination Host Access Denied
    • ICMP Destination Host Unknown
    • ICMP Destination Network Access Denied
    • ICMP Destination Network Unknown
    • ICMP Destination Unreachable
    • ICMP Fragment Reassembly Time Exceeded
    • ICMP Fragmentation Needed [D/F set]
    • ICMP Host Redirect
    • ICMP Host Redirect for TOS
    • ICMP Host Unreachable
    • ICMP Host Unreachable for TOS
    • ICMP Inconsistent Subnet Mask
    • ICMP Network Redirect
    • ICMP Network Redirect for TOS
    • ICMP Network Unreachable
    • ICMP Parameter Problem
    • ICMP Port Unreachable
    • ICMP Protocol Unreachable
    • ICMP Redirect
    • ICMP Required IP Option Missing
    • ICMP Source Quench
    • ICMP Source Route Failed
    • ICMP Time Exceeded
    • ICMP Time to Live Exceeded
    • Illegal Network Source Address
    • IP Checksum Errors
    • IP Time to Live Expiring
    • ISL BPDU/CDP Packets
    • ISL Illegal VLAN ID
    • OSPF Broadcasts
    • RIP Broadcasts
    • Router Storm
    • Same Network Addresses
    • SAP Broadcasts
    • Total Router Broadcasts
    • Unstable MST
    • Zero Broadcast Address
  • MAC Layer
    • Bad Frames
    • Broadcast/Multicast Storms
    • CRC Frame counter
    • Excessive ARP
    • Excessive BOOTP
    • Excessive Broadcasts
    • Excessive Collisions
    • Excessive Multicasts
    • Fragment Frame
    • Illegal MAC Source Address
    • Jabber Frame
    • Network Overload
    • New MAC Stations
    • Oversized Frame
    • Overload Frame Rate
    • Overload Utilization Percentage
    • Physical Errors
    • Runt Frame
    • Same MAC Addresses
    • Total MAC Stations
  • Hints and Tips for Expert Features
  • Summary of Expert Counters and Symptoms
• Multi-QoS
  • Protocols Supported by Multi-QoS
  • Using Multi-QoS with Analyzer Hardware
  • Multi-QoS User Interface Overview
    • Surveyor and RTCP Jitter Values
  • Configuring Multi-QoS
    • Multi-QoS Performance Optimization
    • Call Filtering with Multi-QoS
  • All Calls Table
    • Field Descriptions for All Calls Table
  • Call Range Graphs and Summaries
    • Call Jitter, Call RTCP Jitter, Call Setup Time
    • Dropped Packets, RTCP Dropped Packets
    • Field Descriptions for Call Range Summaries
  • VQMon Metrics
  • Utilization Graph
  • Field Descriptions for Call Details
  • Channel Table Details
    • Filtering on Single Channels
    • Call Playback
  • Customizing Multi-QoS Table Displays
    • Customizing All Calls or Range Summary Tables
    • Customizing Channel Tables
  • Exporting Multi-QoS Data
    • Exporting All Multi-QoS Data to CSV Format
    • Exporting a Single Multi-QoS Table to CSV Format
• Counters
  • Packet Counters
  • Custom Counters
  • Error Counters
  • Expert Counters
  • Multi-QoS Counters
  • Counter Log File Overview
    • Log Directory Structure
• Utilities
  • Name Table Utility
    • Building a Name Table From the Network
  • NIS-to-Name Table Conversion Utility
  • Sniffer™ Translator Utility
  • Internet Advisor™ Translator Utility
  • Get Version Information Utility
  • Convert Capture Files to Histogram Files
  • Merge Histogram Files
  • Extract Frames From a File Using a Filter
  • Logging Utilities
  • Export Utilities
    • Exporting Packets
    • Exporting Tables to CSV Format or Graphs to a Bitmap
    • Exporting to Optimal CSV Format
    • Exporting Counter Log Files to Excel
• Implementation Profile
  • Buffers
  • How Resources Use Buffers
  • Hardware Dependencies
  • About NDIS Mode
    • Captured Packets
    • Capture Rate / Transmit Speed
    • Counters
    • Rx Counter Display
    • Transmit Specification
  • NDIS Configuration Options
    • Setting the Interface
    • Set Capture Buffer and Packet Slicing Size
• Pre-Defined Filter Templates
  • Filter Templates
• Keyboard Shortcuts
  • Function Keys
  • Standard and Navigational Keys
• Parser Names
  • Recognized Parser Names
• Glossary
• Index