Driven by NI-DNATM

Driven by a vision of completecontrol to ensure network andapplication performance, allNetwork Instruments productsare created using theDistributed Network Analysis(NI-DNA) architecture toprovide the capabilities neededto manage complex, growingenvironments.

The first level of complete network control is to fully understandnetwork health. With Observer, administrators gain critical insight tomake network adjustments for improved efficiency. Observer alsooffers greater problem solving capabilities for faster troubleshooting.

• Capture, view and decode network traffic in real-time• Analyze network traffic to diagnose critical problems• Collect long-term trending statistics for proactive decision making• Detect abnormalities quickly with custom triggers and alarms

Unlimited Filtering Options• Include or exclude packets by address, address range, protocol offsets

and presets; use Boolean logic to create complex filters• Design filters visually with an enhanced graphical interface• Instantly create protocol filters selected from Protocol Distribution List• Support for executing concurrent multiple filters• Share complete filter lists between Observer users• Quickly configure filters with Fast Post Filtering

Error Tracking displays - see network problems before theybecome user problems

• Get a snapshot of error conditions with Network Vital Signs• Display wireless errors with 802.11 Vital Signs, as well as

aggregate signal strength, quality, network speeds and more• Track all errors by topology, then drill down to focus on the problem

device with Network Errors by Station

More Real-Time Statistics means more data at your fingertips• Get a comprehensive snapshot of network health with Network

Summary• Set Triggers and Alarms to flag activities or errors and be notified by

email, pager, SNMP trap, etc.• Obtain insight into the total network load with Bandwidth Utilization• Use Internet Observer to review usage by user and sub-protocols • View all access point utilization rates with Wireless Access Point

Load Monitor• Analyze conversation response time with Pair Statistics (Matrix)• See all protocols and applications with Protocol Distribution• Measure and grade network carrying capacity with an independent

baseline assessment in Efficiency History• Predict imminent slowdowns with the Network Activity Display• Scan wireless channels continuously with the Wireless Site Survey• Collect network statistics in Switched Modes on a port-by-port basis

with advanced sampling and scripting • Use Router Observer to display interface utilization rates • See which device is using the most bandwidth using Top Talkers

OBSERVER’S MAIN CONSOLE

FILTER RULES

KEY FEATURES

Superior Packet Capture and Decode- Decodes over 500 primary protocols and countless

sub-protocols (including Wireless)- Nanosecond resolution provides exact analysis,

even for gigabit networks- Add administrator comments to any packet for better annotations- Dynamic port protocol decode provides complete customization

Network Trending and Reporting - Collect and store data for reporting and analysis in Network Trending- View and analyze Internet traffic over time with Internet Trending- Justify capacity upgrades from Comparison Analysis Reports

Complete Vital Signs Display - Comprehensive snapshot of error conditions ranked by severity- Ethernet Specific Errors with ErrorTrakTM drivers (e.g. Packets too

big/too small, CRC, collisions, alignment)- Wireless Specific Errors (e.g. WEP, retries, beacons,

polls, CRC, short PLCP, transmit errors)

Expert Observer adds the next level of control by identifying networkissues and offering immediate solutions. Dramatically reduce the timeit takes to troubleshoot network problems with over 450 real-time experts.

• Predict network bandwidth and response time impacts using “What-If” Analysis

• Track and solve application problems with Application Analysis• Receive accurate high-speed, high volume packet capture with a 4GB

memory buffer• View application session flows graphically with Connection Dynamics• Pinpoint difficult problems through real-time or post-capture

Expert Analysis

Expert Summary Problem Analysis• Error events shown in a single, concise display in real-time• For connection-oriented problems just double click for further analysis

TCP / UDP / ICMP Events• Displays protocol-based and application-based problems• Local traffic is judged using different criteria than WAN/Internet traffic

to ensure no false readings are provided• All common services are tracked and response performance is sorted

and flagged by severity• A generic TCP condition expert tracks all port-based protocols for slow

response or other connection issues

IPX Events• Displays all communication errors being transferred via IPX/SPX

NetBIOS Events

KEY FEATURES

Application AnalysisMonitor and analyze applications with your protocol analyzer andtake troubleshooting all the way to the application layer

- Real-Time and Post Capture- Track application session flows and failed transactions- Receive statistics on errors and monitor response time- Automate Server/Application Discovery- Drill down with Connection Dynamics to view

application detail in conversation flow- Supports SQL (TDS), Oracle (TNS), VoIP, DNS, FTP,

HTTP, POP3, TELNET, SMTP, SNMP, and Exchange- Eliminates need to purchase a separate application

monitoring system

4GB Memory BufferKeep up with enterprise level traffic

- Industry’s largest memory buffer allows for increased packet capture size and substantial time frames for Expert Analysis

- User-defined memory model lets each administrator fine tune Observer’s individual memory mode usage

- Guarantee no dropped packets by using reserved memory not associated with Windows

“What-If” Modeling AnalysisPredict how network changes will affect response times

- Track topology changes (e.g. 100mbps to 1000mbps)- Review variable changes (e.g. average packet size, client-to-

server packet ratio, latency, server load and number of users)- Measure based on actual client/server conversations or peer-to-

peer conversations- Plot possible response time, bandwidth utilization and

packet flow scenarios

“WHAT-IF” MODELING ANALYSIS

ERRORS BY STATION

• Displays NetBIOS conditions and events that are being seen over the network

Expert Wireless Events• Tracks wireless conversations, logging errors and other events of

interest for administrators

Time Interval Analysis• Displays network errors organized by time frequency to identify

whether a problem is sporadic or consistent• Shows if slow response is due to network load

Connection Dynamics• Provides a graphical view of conversations up to application layer• Shows packet-to-packet delay times visually, allowing instant

identification of long latency and response times• Flags retransmissions, lost packets and errors in red for quick

identification

WAN Delay Analysis• Analyzes/captures both ends of a conversation across a WAN link

to measure response times • Quantifies transaction time between PC and server using an

exclusive method of synchronizing captures• Determine how long it takes for data to transfer across the WAN

Server Analysis• Display server response times charted against the number of

simultaneous requests• Chart response times for recorded request sets, and as request

loads increase

APPLICATION ANALYSIS

WIRELESS SITE SURVEY

CONNECTION DYNAMICS

For the most complete level of network control, acquire all thefunctionality of Observer, Expert Observer plus full SNMP andRMON device management with Web Reporting from Observer Suite.

• Optimize network devices (including switches and routers) with a full SNMP management console

• Monitor LANs/WANs from a central location using RMON1, RMON2 and HCRMON collection consoles

• View statistics from any browser using the built-in Web reporting service

Custom Decode Kit• Add custom, proprietary, or additional protocols to Observer decodes• Full wireless support

Switch Station Locator• Displays names or addresses of devices by port connected to a

switch using SNMP

Full SOAP Support• Obtain access to error, capacity and historical network data to any

application that supports XML or SOAP

SWITCHED PORT ERRORS PER SECOND

SWITCH UTILIZATION

KEY FEATURESComplete SNMP Device ManagementA single solution for multi-vendor hardware networks, including aremote console for SNMP compliant devices anywhere on yourLAN/WAN or connected by the Internet.

Full Support- Obtain multiple views of device data- Review both readable/writable SNMP objects through Observer

or a web-based browser- Monitor and set notifications based upon SNMP traps- Maintain compatibility with all SNMP versions through an

included MIB compiler- Configure Triggers and Alarms for SNMP data

Extensive Reporting and Trending- Reports SNMP data in real-time- Data is collected and viewed later for baseline comparisons - Share findings with tailor-made charts, tables, lists and graphical

objects (forms)

Monitor and Control any RMON-standard DeviceRMON is the industry standard for traffic management and packetlevel data collection for multi-segment LANs

- Fully compliant with all RMON1 and RMON2 specifications- Configurable alarms to warn of impending problems- RMON console supports high capacity RMON (HCRMON)

Supports all 21 RMON and HCRMON groups including:- Packets received/sent/dropped- Statistics by host- Statistics by conversation between two sets of addresses- Lists of events

Use Web Publishing Service to report from any browserWhether they’re internal employees or outside consultants, a Webbrowser is all they need to view data and generate reports of theirown. You control the level of access.

- Publish network “Weather Reports” for your corporate intranet/extranet

- Provide non-Observer users controlled access to network or WAN baseline data

- Access current or historical statistics from any browser,anywhere

- Real-time statistics with granularity down to one minute- Define different access permissions for multiple users- Give in-house administrators control over access to sensitive

data- Reports can be configured to display data based on time,

stations, switches and SNMP data- Obtain current or historical data and usage trends based on

specific stations

for localThe award-winning Observer family of products from Network

Instruments combines a comprehensive, freestanding

management and analysis console with high-performance

distributed Probes to provide integrated monitoring and

management of your entire network (LAN, 802.11a/b/g,

Gigabit, WAN).

Software Options

Observer

- Decodes over 500 protocols and countless subprotocols

- Long-term network trending and analysis

- Real-time statistics

- Supports Ethernet (10/100/1000), 802.11a/b/g,

Token Ring, FDDI

Expert Observer

- “What-if” Modeling Analysis

- Expert Analysis

- Connection Dynamics

- Supports Ethernet (10/100/1000), 802.11a/b/g, Token Ring,

Full Duplex Gigabit, WAN

Observer Suite

- Complete SNMP device management

- Supports full RMON1, RMON2, HCRMON

- Web Publishing Reports

- Supports Ethernet (10/100/1000), 802.11a/b/g, Token Ring,

Full Duplex Gigabit, WAN

and remoteNetwork Instruments provides a complete set of remote

monitoring solutions and hardware options so administrators

can acquire identical management and analysis information

from remote networks.

- Gain multiple points of visibility

- Manage remote networks as if they were local (24 x 7 x 365)

- Eliminate the time and expense of travel

- Select Probes to fit any topology or infrastructure

Remote Probe Options

Advanced Single Probes

- Complete Observer data collection for remote sites,

local/remote segments or switches

- Web accessible for a quick snapshot

- Full password protection of data

- Support for wired and wireless networks

Advanced Multi-Probes

Multi-Interface

- Simultaneous monitoring for up to 64 network interfaces

- Mixed topologies (LAN, 802.11a/b/g, Gigabit, WAN)

Multi-Session

- Numerous Observer Consoles can attach to a Probe

- Several Observer Consoles can communicate with each other

- Various users may collaborate by viewing data from a single

interface

Security Level Logins

- User defined levels for different degrees of Probe access

- Also configurable for administration, Network Trending,

Probe configuration, packet capture/decode and more

- 3DES encryption option for data transfer

Gigabit and WAN Hardware Options- Portable analyzer systems

- Rack-mount Probes ready to go

- Direct, passive link for independent views

SYSTEM REQUIREMENTSOperating Systems SupportedWindows® 2000, XP, 2003

For minimum and recommended systemrequirements please visit our website at:www.networkinstruments.com/products

Awar

d W

inni

ng N

etw

ork

Anal

ysis

Choose Your Level of Control

EEXXPPEE

RRTTOOBB

SSEERRVV

EERROO

BBSSEE

RRVVEE

RRPacket Capture and DecodeDecode over 500 primary protocolsCountless subprotocolsNanosecond resolutionDirectional indicators for full-duplex capture4GB Memory Buffer

Unlimited Filtering OptionsUse Boolean logic for creating complex filtersDesign filters visuallyInstantly create protocol filters from listShare filter lists between Observer usersFilter for virus and attack signaturesFast Post Filtering for quick execution

Error TrackingNetwork Vital Signs Mode802.11 Vital SignsNetwork Errors by Station

Network Trending and ReportingNetwork Trending Dashboard DisplayEfficiency HistoryComparison Analysis Reports and Summary

Real-Time StatisticsNetwork Summary Bandwidth UtilizationTop TalkersInternet ObserverProtocol DistributionNetwork Activity Display Wireless Site Survey Wireless Access Point Load MonitorSwitch StatisticsRouter ObserverPair Statistics

Cross Mode Drill DownInstantly display detailed data information

Triggers and AlarmsFlag activities or errors with a predefined listSet custom notifications based on any filterReceive immediate alerts when securitythreats are detected Choose alert method (email, pager, etc.) andschedule response (ex. launch program)

HP OpenView Integration

Over 450 Real-Time ExpertsExpert Summary Problem AnalysisTCP/UDP/ICMP EventsIPX EventsNetBIOS EventsExpert Wireless EventsTime Interval Analysis

Unique Expert AnalysisConnection DynamicsWAN Delay AnalysisServer Analysis“What-If” ModelingVoIP Analysis

Application AnalysisReal-Time and Post CaptureMonitor response timeView total/failed transactionsTrack application session flowsProvide statistics on errorsAutomate server/application discovery

3DES Encryption

SNMP Device ManagementReview readable and writable SNMP objectsMonitor and set notifications based on TrapsSupports SNMP 1, 2 and 3 with MIB compiler

Network Trending and ReportingReport SNMP data in real-time

Switch Station LocatorIdentify users’ port location by switch

RMON Device ManagementFull support for all 21 RMON and HCRMON groupsEnhanced RMON Filtering

Web Publishing ServicePublish network ‘weather reports’ to intranet or extranet

OOBB

SSEE

RRVV

EERR

SSUU

IITTEE

HOW WELL DO YOU KNOW YOUR NETWORK?

With Observer you can answer thesequestions and more:

Are my host sessions “hanging?”Observer’s capture and decode will showwhich system sent the last packet andwhich system failed to respond—client orserver.

Do I need a faster WAN/Internetconnection? Router Observer shows averages byminute and by hour for router interfaceusage statistics.

Can’t log in? Packet Capture can display loginnegotiations, retransmissions and responsetimes to locate the problem.

What is my switch throughput? Observer’s Switched BandwidthUtilization shows switch throughput andeffective switch efficiency.

Is there a tool that can monitor my VoIPconnections? Observer’s complete decode of H.323,including VoIP, ensures you will have thetools you need when voice and dataproblems arise.

Example problems Expert Observer canhelp you isolate:

What’s causing the slowdown? Expert Analysis will provide a summary ofconclusions about any problems andpossible causes, in real-time or uponcompletion of capture.

Why has the company’s main databasebecome so slow? Expert Events and Server Analysis willidentify the client/server relationshipsautomatically and display expert analysisstatistics, including slow response times,busy network or server problems andretransmissions.

Will moving to Gigabit improve my networkresponse time? With “What-If” Analysis, determine theimpact of changing variables by creatingunlimited scenarios based on captureddata. Predict network bandwidth, responsetime and packets per second.

How can I isolate intermittent problems? Use Time Interval Analysis to view errorsby time periods and clarify if a problem issporadic or consistent. Data transmissionsare displayed as a “drill down” from anyproblem identified in the IP/TCP/UDP/IPX,NetBIOS/NetBEUI Experts.

Can I get more detail about a particularconversation? Connection Dynamics allows you toanalyze and graphically view anyconversation’s behavior—displaying inter-packet timing between stations andconversational events, highlightingretransmissions and application detail.

Use Observer Suite to answer thesequestions and more:

Can I view utilization and errors on a multi-interface router? You can use SNMP Reporting to query anyrouter and view link utilizations and errorsin chart or graphical form. Additionally, longterm Network Trending can offer periodand comparison reports for managementand SLA verification.

I have outside consultants working on myLAN that need to constantly see traffic data.Can I provide them with this access withoutgiving them packet decode abilities, whichwould compromise network security? Yes! With the Web Reporting Service, youcan provide access to aggregate trendingflow and SNMP data, without the securityrisk of sending decoded packets.

© 1994-2004 Network Instruments, LLC. All rights reserved. NI-DNA, ErrorTrak, Observer, Network Instruments, and theNetwork Instruments logo are trademarks or registered trademarks of Network Instruments, LLC. All other trademarks,registered or unregistered, are sole property of their respective owners.

About Network Instruments

Network Instruments is the industry leadingdeveloper of superior, user-friendly, and affordablenetwork management, analysis and troubleshootingsolutions. The award-winning Observer family ofproducts combines a comprehensive managementand analysis console with high-performanceremote Probes to provide integrated monitoringand management for the entire network (LAN,802.11a/b/g, Gigabit, WAN). All NetworkInstruments products are designed utilizing our Distributed Network Analysis (NI-DNA) architecture. With NI-DNA, the Observer solutionset simplifies network troubleshooting and management, optimizes network and applicationperformance and scales to meet the needs of any organization. Founded in 1994, NetworkInstruments is headquartered in Minneapolis,Minnesota with offices in London, Paris,throughout the USA and distributors in over 50 countries. More information about the company,products, innovation, technology, NI-DNA,becoming a partner and NI University can befound at: www.networkinstruments.com

Solution BundlesContact a Network Instruments representative or dealer to ask about product bundles that cover all of your network management needs.

Contact UsCorporate HeadquartersFrederick Engineering, Inc.832 Oregon AvenueSuite MLinthicum Heights, MD 21090USA+1.888.866.9001 toll-free+1.410.789.7890 telephone+1.410.789.7670 faxwww.fetest.com