Highlighting any pair will display Expert Analysis in the "Expert Analysis" pane at the bottom of the display. Expert Analysis is offered for client, network and server.

Problem Status indicators:

• Red-indicates a critical problem.
• Yellow-indicates a marginal problem.
• Green-indicates no problems.

There is Event analysis for all major protocols. Each shows protocol-based and application-based problems in real-time. Local traffic is judged using different criteria than WAN/Internet traffic to help make certain no false readings are provided. All port-based services are tracked, slow response/no response and slow connect/no connect are flagged and sorted by severity. A generic TCP conditions expert tracks all port-based protocols for slow response or connection characteristics.

Connection Dynamics

Provides a graphical view of system conversations. Packet-to-packet delay times are shown visually, allowing instant identification of long latency and response times. Retransmissions and lost packets are flagged in red for quick identification. Should a particular packet require further investigation, its decode is only a click away.

Any conversation can be displayed as a “drill-down” from any problem identified in the IP/TCP/UDP Experts. Time Interval Analysis shows network errors organized by time periods to identify whether a problem is sporadic or consistent throughout the day. This information is critical in determining if a problem is spread throughout a period of hours, or if it localized to a specific time span. Network utilization within the Interval Analysis is displayed to help match slow responses with heavy network load.

Displays a server's response times charted against the number of simultaneous requests asked of that server. Response times are charted for recorded request sets, and plotted for predicted response times as request loads increase.

TCP Stream reconstruction lets you browse through the sequence of application requests and responses, and view the resulting file, table, e-mail message, or other application-related data. You can actually see the files as users see them, in the context of any application commands or error codes that were also exchanged.

MultiHop Analysis and capture feature offers time synchronization technology that can track conversations through multiple segments, hops, and routes and identify the delays between hops. Require a probe at each hop to capture all points of a conversation. This feature quantifies transaction time between PC and server using a Network Instruments exclusive method of synchronizing captures. Pinpoint bottlenecks within specific conversations or verify if 3rd party service providers are performing to their SLA. Helps isolate if slowdowns are due to network delay or system processes.

Other Expert Features:

VoIP Expert Details

• Monitor connections to improve VoIP performance
• Save or play voice conversations or streaming video
• Offers relevant and actionable detail and diagnostics
• High-level VoIP traffic summaries
• In-depth Call Detail Records
• Over 50 event and threshold-based VoIP Experts
• Displays the individual MOS and R-factor for every call
• Customize impairment factors of the E-model depending on your needs
• See reports on QoS by call, packet, and protocol
• Understand VoIP utilization to plan upgrades
• Sort TCP sub-protocols by precedence bit to help prioritize VoIP traffic
• Review flow including call setup, duration, and teardown
• Jump immediately to Connection Dynamics to understand direction and delay of every packet in the stream
• Monitors VoIP across LAN, WAN, gigabit, and WLAN
• Shows current and maximum jitter
• Analyze H.323/SIP conversational data

Wireless Experts

• Isolates and provides solutions to WLAN issues
• More than 50 wireless-specific Expert conditions
• Receive instant alerts on
• Unknown stations
• Spoofed MAC addresses
• Whether an AP is used open system or shared key authentication
• Whether encryption is disabled or enabled
• Authentication and de-authentication rates