Distributed Sniffer System

Network Associates Distributed Sniffer System® is a fault and performance management solution that distributes expert troubleshooting and analysis to key segments throughout your network. By incorporating the expert analysis capabilities and advanced protocol decodes of Network Associates own Experience Technology, the Distributed Sniffer System is able to determine, pinpoint, and analyze performance problems on multi-topology, multi-protocol networks -- and automatically recommend a course of corrective action.

How It Works

The Sniffer Network Analyzer's job is simple: keep the network running at peak performance levels.

From a single point of control, you can manage your entire multi-segment network.

The Distributed Sniffer System supports leading operating systems and integrates with leading network management systems at the map and menu level. Servers in the field forward SNMP traps and generic traps to the SniffMaster Console (or network management system).

With Servers placed on backbones and mission-critical segments, and SniffMaster running on your management console, the Distributed Sniffer System provides the end-to-end, top-to-bottom visibility you need to maintain, manage, and optimize performance on your distributed network.

The analyzer captures frames, simultaneously building a database of network objects from the observed traffic and using this knowledge to detect network anomalies. An anomaly is categorized as a symptom (a non-critical event such as a single file retransmission or a physical error) or a diagnosis (a critical fault requiring prompt investigation and correction, i.e. a frequently repeated symptom, such as excessive file retransmissions, or a single instance of a major network problem such as a duplicate network address).

With Experience Technology built into the Distributed Sniffer System, performance problems are detected, identified, and analyzed.

Here, the user was alerted via a major alarm in various console applications.

As the user drills down to successive levels of information, the system identifies the problem (excessive retransmissions) and recommends a solution (balancing traffic to avoid overloading critical routers or servers).

After isolating, analyzing and categorizing the problem, the Sniffer Analyzer alerts you, explains the problem, and recommends corrective action - all automatically and in real time.

Datasheet

Expert Analysis

The superior expert analysis capabilities of Experience Technology are built into the Distributed Sniffer System, giving you greater depth of visibility, management automation, and problem-solving information.

Automatic visibility. The Distributed Sniffer System "sees" into all seven layers of the OSI network model. Regardless of where or when they occur, problems are pinpointed and analyzed, and solutions are recommended, automatically.

Automatic analysis and alarms. The system automates most fault and performance management functions. Configurations are learned automatically and in real time. Performance problems are detected and pinpointed, and alarms are forwarded with details on the event and server condition ­ automatically. Expert analysis is performed and solutions are offered automatically. Expert analysis can even be scheduled for automatic data collection on up to 16 segments.

Automatic problem-solving. Bottlenecks, protocol violations, even problems like duplicate addresses and misconfigured routers are identified automatically ­ often before they have a chance to impact network performance.

Automatic reporting. For network performance optimization, expert analysis information can automatically be collected, stored, and then imported to the resident reporting function, Network Associates Reporter, or a spreadsheet program.

The monitoring function of the Distributed Sniffer System allows you to establish performance baselines for fine-tuning network performance, as well as to proactively manage your network by spotting potential problems before they impact the network.

Network Monitoring

Monitoring is an ideal way to keep constant tabs on segments, detect anomalies, and keep a record of segment performance. Servers collect current and historical segment statistics which can be displayed in real time for an instant snapshot of network activity, stored for later display, or transferred to database, spreadsheet, or management reporting programs such as Network General's Reporter. The system also comes with a variety of pre-designed management-quality reports for displaying statistical information in easy-to-read formats.

The Distributed Sniffer System is available with optional database modules for Oracle7 and Sybase/Microsoft SQL Server database applications. With visibility inside the Oracle TNS or Sybase/Microsoft SQL Server TDS protocols which establish the client/server communications links, you've got a clear view of the performance relationship between the database application and the network. This avoids the mutual finger-pointing between network and database administrators and enables you to quickly troubleshoot and efficiently fine-tune the performance of your client/server database applications.

Protocol Interpretation

Complex problems often call for details on data packets. The Distributed Sniffer System provides the most extensive -- and savvy -- collection of decodes available anywhere. More than 250 protocols at all network layers are interpreted for you, not in cryptic "spec-speak", but in plain English. And, unlike other protocol guides, our decodes recognize changes in protocols to provide you with the latest information, even when it has evolved beyond the technical specifications.

Additionally, sophisticated filters allow you to pre-capture and display relevant packets only, for maximum convenience. A traffic generator function also allows you to load captured and altered packets onto the network for stress testing.

With the largest, smartest collection of decodes available, the Distributed Sniffer System provides industry-standard Sniffer technology in a system designed specifically for complex, multi-protocol, client/server networks.

For a detailed look at frame packets, the protocol interpretation function displays network traffic in three formats � Summary, Detail, and Hex � which provide progressive levels of detail about packets and protocols. Up to six views can be compared side-by-side on the same screen simultaneously.

How It Helps

The Distributed Sniffer System -- Network Associates distributed fault and performance management system with a single point of control -- covers your network with more analysis, more protocol interpretation, more automation, and more visibility than any other solution. This has several practical advantages:

Speedy resolution. With automatic problem identification, analysis and solution recommendation, you can significantly reduce the time spent troubleshooting.

More control. Automated control of up to 16 matrix switch ports plus support for matrix switches from a variety of vendors gives you a greater degree of control over switched networks.

Maximize investments. By integrating with, and complementing the capabilities of, leading network management systems, the Distributed Sniffer System adds troubleshooting to your existing capabilities.

Centralized management. By managing several segments from a single site, you increase efficiency, control and productivity. It's also more convenient than traveling to remote sites.

Quality of service. Forewarnings are automatically sent to you before performance is impacted, allowing you to proactively manage your network, keep end-users productive, and meet service-level goals.

You're having performance problems with your WAN link. Checking your management system map and noticing received alarms, you launch the SniffMaster application for the problematic server. The expert overview gives you an assessment of the situation, while Experience Technology-based expert analysis identifies the problem and recommends the solution. Intelligent, actionable information lets you solve the problem and maintain service-level agreements.

SniffMaster, integrated with the Cabletron Spectrum network management system, immediately and automatically analyzes the problem as "CIR exceeded", a potentially costly, performance-degrading problem. This information, plus recommended solutions, assist in reconfiguring and finetuning the network.

Solving Problems with the Distributed Sniffer System

By providing in-depth seven-layer analysis on all covered segments, the Distributed Sniffer System helps you maintain service-level agreements and minimize some of the most common challenges to network performance.

Easing Deployment of New Applications/Technologies. By using the Distributed Sniffer System on a pilot network before production deployment, you can analyze the impact of new applications or technologies. Distributed Servers out on the network show the effect on segment performance and provide advice on where and how to make improvements. For further fine-tuning, use the Network General's Reporter application to graph historical data collected from the Distributed Sniffer System and compile trend analyses.

Minimizing Downtime. By providing visibility into every layer of network traffic, the Distributed Sniffer System quickly locates problems and determines causes. Experience Technology provides the protocol decodes and expert analysis to help you determine the root and solution of the problem. And the monitoring and anomaly-alarm functions of the Distributed Sniffer System help you spot potential problem areas before network performance is impacted.

Improving Response Time. Slow network response has a variety of causes. By automatically assessing and analyzing the symptoms, the Distributed Sniffer System helps you swiftly investigate the problem and move directly into corrective action. And when this information is combined with the Reporter application, you can chart historical data to analyze trends and justify investments in additional resources.

Managing Remote Locations. The design of the Distributed Sniffer System allows network managers to easily monitor and troubleshoot remote locations from a single point of control eliminating the time and expense of arriving onsite. Even when the network is down, you can still access your Servers with SLIP out-of-band support.

Leveraging Resources. The Distributed Sniffer System is a highly effective system for monitoring, troubleshooting, and managing your distributed network. When additional expertise is still needed, Network Associates offers a range of training, support, installation, and consulting services through our Services group. Experienced consultants are available onsite or remotely to help plan or troubleshoot your particular network. Sniffer University offers courses, on-site or at locations around the country, to develop and enhance network skills at all levels. And our PrimeSupport program offers a variety of standard and custom support options to protect and enhance your network investment.

To help you maximize your investment, Network Associates offers a wide range of support, installation, consulting, and educational services.

Our Integration Service for the Distributed Sniffer System helps you get the most out of your investment from the beginning. We install, tune, and configure your Distributed Sniffer System customizing the configuration to meet the needs of your network. If you use a Network Management System, let us show you how the SniffMaster Console can be integrated to create a true single point of control for your network. We can also assist you in installing and fine-tuning Network General's Reporter.

Our Sniffer University conducts network management and analysis classes (including a Distributed Sniffer System class) either at our facilities or your site at introductory, intermediate, advanced, and expert levels.

To ensure that your network stays up and running, our PrimeSupport programs offer variety of standard and priority services, including round-the-clock technical support, software updates, rapid spares, and more.

And to assist with your troubleshooting, analysis, planning, and optimization requirements, Network Associates Consulting Services provides hands-on expertise delivered by a Certified Network Expert.

First and Foremost
The Sniffer Network Analyzer was the first product to provide fully functional, automatic, real-time expert analysis of networking problems. Now the industry standard, this technology is the preferred choice for over 80% of the Fortune 500, and -- updated, enhanced, and applied specifically to client/server networks -- is the basis of the Distributed Sniffer System.

Request further information | Return to home page