print

Tip of the Month

Network Analysis Tip of the Month – November 2005

Details, Details, Details!

Author – Saurabh Bhasin

I've been using this great story to tell people how easy it is to use our products to get right into what you are looking for!

Forget about making those complex filters for a second. Leave "Select Related" behind. Forget the "CTRL+F" combination to look for something quick. It's all about the three double clicks.

Let's say I see a lot of HTTP Activity on my network. Maybe it's my policy not to have any clear-text protocols, including HTTP. Everything should be HTTPS. Well, get to the protocols tab (yes, doesn't matter if you have 500 or 500000 packets). Double click on "HTTP" (alternatively, right click and protocol details should do the same).

Now you're looking at all HTTP traffic, and who's causing it. Let's say you see "Bob" (integrating the name table here) right on the top. Well, double click on "Bob". Now you see who Bob is talking to, over HTTP.

Well, you're not going to give up, right just yet. Now you want to see what the numbers are (packet and byte counts) between "Bob" and "google.com". Well, double click on "google.com" now.

Three double clicks, and now we're looking at all http traffic, for bob, going to google.com.

Enjoy!