Network Forensic Analysis
Using Packet Analysis for Post-Event Reconstruction
Summary of information on this page:
NetScout Solution for Network Forensic Analysis
The NetScout Solution continuously captures and records packet streams on critical network links so that when a subtle or intermittent problem occurs, you can quickly go back in time to discover the problem cause without having to wait for a reoccurrence. NetScout products provide the flexibility to:
- Investigate post-incident, needle-in-the-haystack issues
- Use graphical data mining to quickly and intuitively search through 8 TB of packet history
- Focus down to sub-second granularity and launch a packet decode for the most subtle problems
- Reduce the mean time to repair (MTTR) for reported problems
- Minimize network impact of packet analysis with a superior architecture for high-performance, on-appliance packet analysis
Network Forensic Analysis Challenge
Researching subtle application and network problems that occurred earlier in the day, last night, or over the weekend can be virtually impossible, particularly when current tools don’t identify an event that triggered the problem. Traditional troubleshooting tools were very reactive in nature, lacking the historical visibility required to research past incidents.
For the most critical areas of the network – those with revenue-impacting services – you cannot afford to spend time manually recreating a problem or waiting for it to recur. A new generation of packet analysis has been designed to fit this need, so that packets can be captured proactively and stored for later availability when intermittent and subtle network issues occur to business-critical application services.
NetScout Solution Meets the Need with Next-Generation Network Forensic Analysis
As the preeminent solution amongst the new generation of packet analyzers, The NetScout Solution eliminates the reoccurrence of disruptions to business-critical applications by recording evidence of hard-to-diagnose problems. It continuously captures all packets on your essential network links, letting you quickly assess the exact circumstances surrounding a performance event, reduce MTTR, and ensure that the organization is not impacted a second time. The NetScout Solution help you through the whole event reconstruction process by:
- Collecting evidence: accumulating a 24x7 packet-level audit trail of network and application activity
- Getting to the root of the problem: surgically zooming in on the root cause of the problem with graphical data-mining down to the sub-second, to pinpoint the exact users and applications associated with a network disturbance
- Taking corrective action: extending your analysis where necessary to a packet decode, bounce diagram, or export to your favorite trace expert tool
- Documenting resolution: easily turning your troubleshooting evidence into an on-demand report to share a problem with colleagues or demonstrate to business managers the positive results derived from solved problem.
|
| Intuitive Packet Analysis: Quickly drill-down on a traffic spike with a right mouse click and analyze all needed data side-by-side in the same Workspace. |
|
Related Documents and Press Release
Enabling Products
To find out more information about NetScout’s nGenius and Sniffer products click on the appropriate category links below:
- Network Analysis and Reporting – packet/flow-based analysis software for comprehensive network visibility
- Advanced Intelligence – early detection and in-depth analysis of complex or specialized application services
- Continuous Packet Capture – long-term packet capture for real-time and retrospective network troubleshooting
|
