Previous | Table of Contents | Next |
A network analyzer is a tool that listens to network packets on a shared segment and decodes them into human-readable format. Some are horrendously expensive, some are not. The neat thing about them is that they run on most PCs if you have the right type of network cardthat is, a promiscuous network card, which is able to listen to all network packets.
Depending on the analyzer, you can expect to see many functions that will help you analyze the raw data that the analyzer captures. Some of these functions include capture filtering, sortable statistical displays, expert analysis of data, and customizable views.
Theres more than one analyzer available on the market, because theres more than one problem out there. Different analyzers are good for different things. In particular, Token-Ring needs certain features not present on generic analyzers.
Knowing what and when to filter is a really important part of learning how to use an analyzer. Once you learn how to take small manageable trace files, youll be able to quickly go through them and find what you need in order to vanquish your problemsor to entice your vendor to help out.
Analyzers, like any tool, have limitations, but if you have your wits about you, theyre a powerful addition to your troubleshooting arsenal.
Q Cmon, Jonathan! Network analysts spend years learning how to sift through protocol data. How do you expect me to learn this in an hour?
A The key here is to limit the scope of what youre expecting to accomplish. True, although youre probably able to learn the various protocols and service nuances that underlie the everyday programs and services that you know and love, why would you want to? Analyzers are simply an effective way for you to apply your black box troubleshooting skills. Dont get discouraged if you dont understand everything you see on the decode screenjust remember to keep asking yourself questions such as which of these things is not like the other? and youll do very well. If you feel you need or want to dig deeper, grab a protocol book and have fun. However, in many cases, that wont be necessary.
Q Where can I get an Ethernet mini-hub or Token-Ring node doubler?
A The same place you can get a mini-switch: Just visit one of the various network supply houses that have homes on the Net. Ive had good luck with www.networksnow.com and www.datawarehouse.com, but any of them can supply these items to you.
Previous | Table of Contents | Next |