Which network protocol analyzer for SPAN capture?

Hello,
I have to do SPAN captures and I?m using Ethereal to analyze the traffic.
I?m disatisfied with Ethereal because my capture files are very big and it failed to open them or it takes ages to open them.
What are the alternative software that I could use?
I also would like to filter packets on packet lenght but Ethereal doesn?t support it.
thanks a lot in advance for your advice.
Laurent

Laurent,
Have you tried Packetizer from http://www.networkchemistry.com/products/packetyzer.php ?

Similar Messages

Trying to capture SIP traffic via a Network Protocol Analyzer

Hello
I am trying to use WireShark to capture n/w traffic.
Im running my OCMS instance on 127.0.0.1:5060, and am able to see the SIP msgs in the traffic.log and system.log files.
However, the same doesnt show up in the protocol analyzer as a registered interface.
Hence, is it possible to capture this traffic on the loopback IP?
Furthermore, I changed my OCMS instance to my ethernet IP, since WireShark listens to it.
However, I see that only SIP msgs sent from another box are recorded. Hence, if 2 clients talk on the same machine, the sip msgs r not registered. Why should that be the case?
Message was edited by:
A.J.

Hi A.J,
There is no way to capture any packages in a loopback. This is a limitation of Windows OS.
And you can't capture network traffic within the same machine (or network interface)
Regards,
Juan

Network Protocol Documentation for ARD or ANA?

Is anyone aware of any documentation on the network protocols used by ARD? I have plenty of docs on RFB/VNC, but Apple is doing something more with ARD than standard RFB. It looks like they are still making some use of Apple Network Assistant (UDP port 3283) protocol and clearly performing other tasks that aren't part of the RFB standards. Could anyone point to any documentation for this?
I'm trying to develop some utilities that will make working with ARD in a multi-thousand Mac environment a bit more tolerable. I'm not very interested in remote desktop control; this is about asset management and patch management. Once you have more than a couple-thousand Macs in ARD, it seems to slow to a crawl.
For example, we have a very large number of large (21-bit) subnets, and the ARD scanner takes forever to scan them. I've written a small utility that will scan a subnet in seconds, and provide a text file containing only active computers that are Macs. This output loads into ARD much, much faster. I did this after discovering that a UDP packet sent to port 3283 will cause a Mac to respond with its name, ethernet address, etc. I'm trying to figure out what else is in that response packet, and what more I can do. I'd rather have an ARD API that allows me to add/remove computers into ARD (anyone?) but that appears to be the one area that Apple forgot. I'm still new to the Mac world, so I could have missed any number of things. Pointers would be welcome.
Thanks!

Ok, I've figured out why I dropped the AppleScript route. The ARD dictionary command to "add" a computer to a list appears to require a computer descriptor for a machine that is already in ARD. So, doesn't look like it can actually add a computer to ARD via that route.
Regarding import from file:
I've used the scanner to scan IP addresses from a text file that is the output from my utility. While manual, this does work. I then have to "add" the computers to the "All Computer" list manually, specifying the credentials. This has been my process to date. Better than nothing, but very manually intensive. It also appears that the scanner is limited to scanning only the first 4096 addresses from a text file, we have about 20x that number of Macs.
I have not tried writing a plist from my utility and importing directly (bypassing the scanner). I'll give that a shot. Assuming this works, it might take one manual step out of the process. Still not sure if I can automate list import any further.
I'd still like to find some protocol-level documentation so that I can improve the precision of my scanner utility. I'd like to verify my credentials on each system discovered, and verify that the ARD client-upgrade is an authorized task before going to the trouble of adding them into ARD only to find these problems later. So far, a significant percentage of my Macs are still running ARD 2.x and 1.x so the upgrade process is important. On a related note, it doesn't look like the "Upgrade Client" task can be relegated to the local task server. Wonder why...
Thanks again.

Which network is best for pay as you go

Which network is the best for pay as you go in the UK

The only network in the UK where you get all the facilities of the iphone active is o2, none of the rest support visual voice mail and with the new o2 contracts the personal hotspot is included in tarriff. On older contracts you need a tethering bolt on but at least you can still use it.

Which network to chose for iPad?

I want to use iPad for SkyDemon GPS map. Does it matter which network provider iPad I buy? (A/T) (Verizon) (Orange) (o2) ?
I won't really use that network just want the GPS, but if I decide to use it, if I buy the Verizon one does that mean that's the only card I can use and can't use any others?

pawel747 wrote:
Does it have to have cellular to have GPS? since I can see ipads just with a network provider withot cellular. Eg.
MC773LL/A
This doesn't make sense.
A Network Provider provides Cellular service.
So an iPad with a Network Provider has cellular hardware.
While you do not need an active Cellular service contract to use the GPS, you do need to buy a Cellular capable iPad.

Which network effective route for KM repository ?

Our portal (Knowledge Management) server is located (at Location A) physically far apart from our remote offices (Location B) due to which we are concerned of network bandwidth, latency delays while accessing huge files of 40 / 60MB from a DB repository in portal (Location A) over the WAN from Location B.
Will creating an FSDB, or DBFS portal repository pointing to a remote file share at remote offices (Location B) eliminate the long network path ?
User at Location B requests for a resource in portal FSDB OR DBFS repository. Will the resource (40MB file) be retrieved directly from Location B remote share to the user at Location B or will it traverse from Location B to Location A (Portal) & then back to Location B (remote user), thus creating a redundant network path ?

Hi Muhammed,
There would always be latency and performance related issues when users are accessing files or applications over the WAN. The issues would be more conspicuous when large files in KM are accessed from a DB repository over WAN connections. One way to handle this is through SAP's Accelerated Application Delivery . This tool address the issues of latency and/or performance which are of concern when applications are accessed from remote locations.
Refer the following links to get an idea about Accelerated Application Delivery:
[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b08443bc-75fd-2a10-3da0-8ef1d4f7c622]
[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/60336bbb-e87c-2b10-6aac-b1c834f907dc?QuickLink=index&overridelayout=true]
You can also leverage third party tools like Akamai to achieve the same result.
Regards,
Prathamesh

Which network is used for the modem if wifi is active on the phone?

Can someone tell if I use the blackberry as modem for my pc but there is an active wifi connection on the blackberry at the same time will the internet connection for my pc provided via the wifi network or via the mobile network (despite of the wifi is also there)?
Thanks!
Péter

If you used the on-screen keypad to enter the numbers and letters, is there a "Done" button at the bottom - if so, click that.

Choosing the Right Network Protocol for CRIO 9024 to PXI over Ethernet

We are in the design phase of setting up a CRIO 9024 Embedded Controller to send data captured to a PXIe-8105 Controller over ethernet. The data will be be 2D arrays of double precision. This data will need to be sent to the pxi at the end of each test step. Each step will have different number of channels and sample rates.
For example, Test Step 1 will have 5 channels of Analog inputs that will be sampled at 100,000 KHz for 1 second. This data will be coming from the CRIO FPGA. The data will get post processed by the CRIO 9024 and analyzed for pass or fail metrics. Then, the CRIO controller will send the 2D Array of Data (500,000 data points 5 X 100,000) and the results of all the metrics (a 1D array) to the PXI.
The connection to the PXI will be using Ethernet.
Keep in mind that the PXI will also have to send the CRIO some values to tell the CRIO when to start the test and when the test sequence is complete.
I was thinking TCP/IP would work best because of the 2 way communication needed. But then I was looking at Network Streaming or even using Shared Variables.
If anyone has any ideas or suggestions please please post them.
Spark
CLAD
Test Engineer
Solved!
Go to Solution.

Hi,
You could use either. Whichever you are more comfortable with really. The STM method will have slightly less overhead over my XML style of tagging the data but it will be very little given the data size. Probably go with STM as it just has most of the work done for you.
In terms of data size the way you should normally transfer data like this is to flatten to string. If you convert to a string of human readable numbers you will either lose precision, increase size or both. Given that, the string after being flattened will be the same size as the original array anyway so quick calculation based on your previous post 500,000 doubles (8 bytes) is 4 miB (3.8MB)
Cheers,
James Mc
========
CLA and cRIO Fanatic
wiresmithtech.com/blog

Is there a custom function available which can be used for logging errors captured in a sp in a sql table

Is there a custom function available which can be used for logging errors captured in a sp during and after execution in a sql table?
Basically we would like to utilize such function in every sp and log errors of each sp in a error log table
Mudassar

Thanks .
I was able to write this however I am thinking I am missing something
CREATE FUNCTION testfunction1()
RETURNS @temp_error TABLE (
id int identity(1,1),
procedure_name varchar(255),
line_number int,
error_number int,
error_message varchar(max),
error_state int,
error_severity int,
occurence_datetime datetime default current_timestamp,
user_name sysname default suser_name(),
login_name sysname default suser_name()
AS
BEGIN
insert @temp_error(procedure_name,line_number,error_number,error_message,error_state,error_severity)
select error_procedure(),error_line(),error_number(),error_message(),error_state(),error_severity()
RETURN;
END;
CREATE TYPE test_type AS TABLE(
id int identity(1,1),
procedure_name varchar(255),
line_number int,
error_number int,
error_message varchar(max),
error_state int,
error_severity int,
occurence_datetime datetime default current_timestamp,
user_name sysname default suser_name(),
login_name sysname default suser_name()
GO
create proc usp_error_test
@test_type AS test_type READONLY
as
begin
begin try
select 1/0
end try
begin catch
select * from testfunction1(@test_type)
end catch
end
Mudassar

Routing Protocol recommendation for MPLS Network

I am in the process of building a 14 site MPLS network for voice and data traffic. The vendor installing the network has configured RIPv2 as the routing protocol. I am considering switching this over to EIGRP. Can anyone explain to me why this would be better or should I just stay with RIP.
Thanks

Hi Chip,
Its not very clear whether you are implementing a MPLS network or implementing a Network over MPLS for an end user with 14 sites.
1) If MPLS network then other IGP variants than OSPF and ISIS best avoided. Now if the choice is between ISIS and OSPF then my personal recommendation would be OSPF. And this decision is purely driven by Operational Considerations rather than any technical advantages. Since at the end of the day what matters is how easy it is to implement add delete or troubleshoot the network.
2)If for End User then it would not be right to recommend EIGRP or RIP or OSPF without knowing the current size & topology of each of these 14 sites, as well as the desired expansion plans. But if these 14 sites are the only sites and are all standalone branch sites connecting over MPLS VPN then RIP,EIGRP or OSPF can be implemented as per your and customer comfort.
HTH-Cheers,
Swaroop

Where can I find a free wi-fi network analyzer for an iPad?

where can I find a free wi-fi network analyzer for an iPad?

I doubt that you'll find anything worthwhile that will be free. Writing a network analyzer is not easy nor simple, if anything truly useful is even possible on an iPad since Apple reportedly disallows apps that do a signal scan, so it's doubtful that anyone would go to that much effort and not want to make money from it. But perhaps someone else here will have a useful suggestion for a specific app. It will probably help if you'll post what specific features or functions you need.
Regards.

HT201328 i have an iphone for dont knw which network it is locked so i can know how much it is to unlock it?

i have an iphone for dont knw which network it is locked so i can know how much it is to unlock it?

ONLY the carrier it's locked to can authorize unlocking it.
Ask whoever you got it from who it's locked to or call AppleCare and give them the serial number.

Which network is Oracle using for RAC traffic ? where you will get info ? ?

Hi,
I am using two node RAC on Oracle 10g R2 (10.2.0.3.0) version on SUN Solaris 10 . I want to know "Which network is Oracle using for RAC traffic ? where you will get info "
--Kumar

Hi Kumar,
In 10g, you can query x$ksxpia. If the cluster_interconnect information is stored in OCR (default), you will get
SQL> select INST_ID,PUB_KSXPIA,PICKED_KSXPIA, NAME_KSXPIA,IP_KSXPIA from x$ksxpia;
If you specified the cluster_interconnects parameter in your init.ora:
Columns to look in : INST_ID P PICK NAME_KSXPIA IP_KSXPIA
And also you can use 'oradebug ipc' to see which interconnects the database is using:
SQL> oradebug setmypid
SQL> oradebug ipc
Hope it helps...
Thanks
LaserSoft

Which network security to I choose for my new IPhone 5. I have cable internet with airport router.

Which network security do i choose for my new IPhone 5 If I have cable internet and an airport wireless router?

You should choose WPA2 Personal (AES).
See this Apple doc for more info -> iOS: Recommended settings for Wi-Fi routers and access points

I have an Airport Extreme which I'm using for a wireless network. Can I also plug in my iMac to one of the free ethernet ports on the Airport Extreme to connect to the Internet that way? Thank you.

I have an Airport Extreme which I'm using for a wireless network. (The wireless router is connected to a DSL modem.) Can I also plug in my iMac to one of the free ethernet ports on the Airport Extreme to connect to the Internet that way? Thank you.

Yes, you can.

Which network protocol analyzer for SPAN capture?

Similar Messages

Maybe you are looking for