Understanding Gigastor Protocol And Port Settings - Network Instruments GigaStor User Manual

Understanding GigaStor protocol and port settings

Allow the GigaStor to get smarter by collecting more information. Over time as the GigaStor sees more of your
network's traffic, it gets smarter about the traffic on your network.
Unless you have a specific reason to do so, we recommend that you leave these options selected:
Enable intelligent TCP protocol determination—when checked, all new data collected is indexed by protocol,
only if SYN-SYNACK-ACK packets are observed at the start of the conversation. If this combination is found,
reports show this conversation by protocol name (or custom name), IANA name, or port number (based on
statistics lists setting). Otherwise the conversation is not listed. If you try to analyze data prior to the time that
this option was enabled, you will not see this data. Data must be collected with this option enabled for GigaStor
reports to present the data correctly using the update reports button. By clearing this option, you ensure you get
all protocol information regardless of SYN-SYNACK-ACK packets.
Limit to ports defined in "Protocol Definitions"—limits the displayed data to the ports specifically defined in
the Options > Protocol Definitions dialog. Again, this is written to internal GigaStor index. This option only shows
custom protocols defined on new data collected after a protocol port has been defined. You must also choose
"Apply Protocol to all Instances" to ensure this data is shown on all instances used for analysis. By having this
option unchecked, all ports are used.
If you want to track statistical information for each port on your capture card, then you should ensure Track
statistics information per physical port option is selected.
For even more information about what these settings affect, see Differences between statistics and packets
(page 29) and Understanding GigaStor indexing (page 29).
Understanding GigaStor protocol and port settings | 13