Working with Sample Captures

The NetworkSmart installation includes small sample application capture files to help you understand the power and functionality of NetworkSmart. These sample files can be found in a directory called "Sample Captures" located within the "LeadByte NetworkSmart" program folder.

Bandwidth Sensitive Example (bandwidth sensitive example.cap)

After importing this file, click on the Predict tab to analyze the data. The Response Time Projections chart in the Predict tab reveals the nature of the function. The different colors break down the total duration into three areas: round trip delay, bandwidth delay and processor delay. By looking at the changes of the different intervals in different network conditions, we can determine if the transaction is "Latency", "Bandwidth" or "Processor" sensitive. In this sample capture, because it created more than 100Kb of total traffic, the "Bandwidth Delay" portion of the chart increases more drastically as the bandwidth (size of the network) decreases. We can conclude that this function is more "Bandwidth" sensitive.

HTTP Decode Example (http decode example.cap)

After importing this file, click on the Analyze tab. The Object Load Timeline chart displays how each object was received. This chart is a quick visual aid to help you see the flow of application objects and determine if one object is causing the delay of another. To fully view the HTTP packets, click on the Data button in the Analyze tab. Double-click on any web object in the grid. A window will appear showing you all the frames that are part of the selected object. Since HTTP is a clear text protocol, users can see the content of each packet using Text or Hex view. The Decode view formats the packet contents and presents it in a more readable manner. Users can use this feature to help debug application objects such as web pages, SMB commands and database calls.

HTTPS Decode Example (https decode example.cap)

After importing this file, click on the Analyze tab. HTTPS is an encrypted protocol, thus users are unable to decode or view the object or function of each packet. Although it is not possible to see the content, users can better understand the characteristics of the capture in the Predict and Analyze tabs by reviewing the number of round trips, total bytes and when each request and response was made. By viewing the traffic within NetworkSmart, you can also verify that your application is encrypting all of its data across the wire.

Oracle Decode Example (oracle decode example.dmp)

After importing this file, click on the Analyze tab and then click on the Data button in the Analyze tab. The Decode view of the 192.168.0.12 - 192.168.0.9 segment reveals the content and function of each packet captured. Using this view, users can learn how the client and Oracle server interact as well as the performance of each database call made.

Note: Oracle Decoding is a feature of NetworkSmart Enterprise and is also available as an add-on to NetworkSmart Express.

Processing Sensitive Example (processing sensitive example.cap)

After importing this file, click on the Predict tab to analyze the data. The Response Time Projections chart in the Predict widow reveals the nature of the function. The different colors break down the total duration into three areas: round trip delay, bandwidth delay and processor delay. By looking at the changes of the different intervals in different network conditions, we can determine if it is "Latency", "Bandwidth" or "Processor" sensitive. In this sample capture, both the round trips and total bytes are relatively low. The "Server Processing" portion of the chart occupies the majority of the duration in all the various network conditions. We can conclude that this function is more "Processor" sensitive.

Round Trip Sensitive Example (roundtrip sensitive example.cap)

After importing this file, click on the Predict tab to analyze the data. In the Predict tab, select Segment 192.168.0.13 - 192.168.0.99 from the list box.
The Response Time Projections chart in the Predict tab reveals the nature of the function. Different chart colors break down the total duration into three areas: round trip delay, bandwidth delay and processor delay. By looking at the changes of the different intervals in different network conditions, we can determine if it is "Round Trips", "Bandwidth" or "Processor" sensitive. In this sample capture, because it has 96 round trips, the "Round Trip" portion of the chart increases more drastically as the latency (network delay) of the network increases. We can conclude that this function is more "Latency" sensitive.

Security and Error Example (security and error example.cap)

After importing this file, click on the Analyze tab and then click on the Data button in the Analyze tab. The Analyze (Data) tab maps the request and response as well as the summary data of the transaction. In the 80.90.162.67 - 192.168.0.99 segment, there are 36 complete request and response pairs appearing in the data grid of the Analyze tab. Each of them, however, is associated with an error. If we double-click one of the objects in the grid, we can see that the error is from a SQL Server login request. Since these login attempts were hitting the server constantly but with invalid passwords, we know that someone was trying to hack into the SQL Server database at that specific moment.

SQL Server Decode Example (sql server decode example.cap)

After importing this file, click on the Analyze tab and then click on the Data button in the Analyze tab. Using this view, users can learn how the client and Microsoft SQL Server interact as well as the performance of each database call made. Notice the "select * from Orders1" and "select * from Orders" calls. The first call shows a SQL error (invalid database object). Notice that the second call shows the performance impact of the call (duraction, size, etc.) for both server and network.