Network Instruments GigaStor 114ff User Manual
Page 62

Analyze button
Chapter 4 GigaStor Control Panel
62
rev. 1
Figure 37 GigaStor Analysis Options window
Table 4 describes what the fields in the various sections control.
Table 4 GigaStor Analysis Options
Field section
Description
GigaStor Analysis Filter
Choose whether to Analyze all traffic in the analysis period, Select
an Observer filter to apply before decoding, or Create an analysis
filter using checked GigaStor entries (in other words, based on the
constraints you have selected using the GigaStor control panel).
Subsequent check boxes let you choose which criteria from the
Control Panel selection to include in the analysis. The Include
expert information in analysis filter option should be checked if
you plan on using Observer’s Expert Analysis on the packet buffer;
otherwise leave it unchecked.
Analysis Time Range
Set the start and end time for analysis. The fields are pre-filled
based on the time slider selections made from the GigaStor
Control Panel.
Analysis Type
Choose between Expert analysis and decode, Decode without
expert analysis, or Forensic analysis only. Load time is significantly
reduced (especially with large files) by bypassing analysis
processing for features you are not interested in.
Forensic Analysis
Select a Forensic Analysis profile. See “Starting Forensic Analysis
using Snort rules” on page 92 for details on using this Snort-
compatible feature.