active vs.passive 18
assigning to adapter 77
best practices 18
defining its purpose 73
definition of 18
memory tuning 68
passive 18
passive to active 77
reserving memory 68
virtual adapters 77
probe instance warning 18
Probe Options 104
Probe redirection error 85
Probe Service Configuration Applet 104
probes
backing up 94
common problems with 85, 85
definition 17
hardware 69
hardware acceleration 74
in a switched environment 22
not connecting 85
placing in your network 23
software, versions 20
SPAN ports 20
switching to analyzer 20
VLAN access 85
promiscuous mode 22
properties 79
protected memory 67, 69, 69, 69, 71, 72
Q
QSFP 77
R
RAID 18, 18
RAID array 63, 63
RAID maintenance 65
RAM 72, 72, 72, 73
allocating 73
buffer size 18
effects of packet capture 72
formula 68
GigaStor 73
limitations 68
packet capture 18, 68
probe instance 35
see also buffer 68
see also protected memory, user memory, and reserved
memory 67
recommendations 71
resizing 67
statistics 68
TCP stream reassembly 45
tuning 68
used in Observer 67
Windows 68
RAM limitations 68
RAM needed for busy networks 73
Random Access Memory, see also RAM 67
read performance 102
reassembling 45
recommendations 71
recovery 95
114 | Index (pub. 25.Apr.2014)
registry 94
Remote Desktop 104
reports 12
reserved memory 20, 69, 69, 71, 71, 72, 73
see also RAM 67
reserved memory from 20
reserving memory 68
resizing 67
restore 95
RF signals 24
RMON 22
rules profiles 45
S
sampling 10
Sampling 35
sampling divider 85
scheduled capture 27
scripts 94
security 20
encryption key 85
matching between probe and analyzer 85
Probe redirection error 85
security breach 50
service 104
setting 104, 104
settings 22
settings profiles 45
sFlow 20
SFP 77, 77, 77, 77, 98
SFP hot-swap 77
simultaneous 20
Single Probe 20, 20
Anyone account 85
slow probe system 85
SNMP 22, 94
Snort 44, 45, 45, 45
IP flow 45
IPv6 45
variable name 45
SNORT 94
Snort rules 44, 45, 45
software probes 20
software, versions 20
SPAN 77, 77
auto-negotiation 81
using 24
VLANs 87
SPAN port 81, 87
SPAN port, 10 Gb link 81
see also mirror port 22
SPAN ports 20
bandwidth utilization 23
cost-effectiveness 23
Ethernet 23
settings 22
software probes 20
see also mirror port 22
traffic duplication 23
visibility 23
where to use 23
statistics 10, 58, 58, 68
difference from packets 29
memory 69
RAM needed for busy networks 73