Javvin Packet Analyzer User's Manual


Overview

Professional and enterprise

Version and upgrade

Install and Uninstall

Installation Environment

Get Started to Use

Create a Project and Capture Traffic

Select Capture Sources

Use Menu bar

Use Toolbar

Use Context menus

Use Start Page

Use Dock windows

Understand and Use Tab views

Choose System Options

Restart Capture and Do Automatic Capture

Project settings

HManage Data

Understand Statistics

Manage Filters

Use Command Line to Operate the Analyzer

Do TCP session Reconstruction Using Packet Analyzer

Set and Use Name Table

Manage Logs

Decode Packets

Customize User Interface

Optimize the Performance of the Analyzer


free download Free to try

Order Packet Analyzer Buy Now


Switched network

Switch is a network device working on the Data Link Layer of OSI.

Switch can learn the physical addresses and save these addresses in its ARP table. When a packet is sent to switch, switch will check the packet’s destination address from its ARP table and then send the packet to the corresponding port.

Network with managed switches

Generally all three-layer switches and partial two-layer switches have the ability of network management; the traffic going through other ports of the switch can be captured from the debugging port (mirror port/span port) on the core chip. To analyze the traffic going through all ports, Javvin Packet Analyzer should be installed on this debugging port (mirror port/span port).

The following table presents the advantages and disadvantages of using a switch with mirror port.

Advantage

Disadvantage

  • No additional facility required
  • No need to change network topology
  • Occupies a switch port
  • Possible influence to network transmission performance when meeting huge traffic

Topology illustration 2:

Topology illustration 2

Network with unmanaged switches

If your switch has no management function, you can:

Connect a tap with the line to be monitored

Taps can be flexibly placed on any line in network. When the requirement for network performance is very high, you can add a tap to connect your network. The following table presents the advantages and disadvantages of using a tap.

Advantage

Disadvantage

  • No influence to network transmission performance
  • No interference with data stream and raw data
  • Does not occupy IP address, free from network attacks
  • No need to change network topology
  • High cost
  • Additional facility (tap) required
  • Requires dual adapters
  • Can not connect Internet

Topology illustration 3:

Topology illustration 3

Connect a hub with the line to be monitored

Working on share mode, hubs are applicable for small networks.

Advantage

Disadvantage

  • Low cost
  • No need to be configured
  • No need to change network topology
  • Additional facility (hub) required
  • Interference to network transmission performance when meeting huge traffic
  • Not applicable for big networks

Topology illustration 4:

Topology illustration 4