网络工程师产品介绍sniffer

1、Sniffer高级产品技术剖析 Sniffer 在业界的优势和地位Sniffer 的工作原理Sniffer 能够解决的问题Sniffer 的关键技术Q&A议程Begin with Best-of-Breed ProductsTotalNetworkSecurityTotalNetworkVisibilityTotalServiceDeskAdd Integration and ValueNet Tools SecureNet Tools ManagerNet ToolsActiveVirusDefenseVirusScanNetShieldGroupShieldWebShieldGauntle

2、tCyberCopPGPDist Sniffer/RMONPortable SnifferReporting productMagic Help DeskZAC 2001PGP VPNWireless Network VAR - 1997 Best Intelligent Network AnalyzerSniffer Network AnalyzerNetwork Computing 5/98 Well-Connected AwardSniffer Basic - Best Protocol Analyzer - SoftwareInfoWorld Product of the Year 1

3、999InfoWorld 9/98 - Excellent Rating Sniffer Pro 98PC Week Labs 9/98 - Sniffer Pro LAN 98 wins Analysts Choice award for Protocol Analyzers业界的承认 - 45+ 奖项Network Magazine, Sniffer DSS/RMON “Distributed Analyzer Winner” Oct.18, 2000Network Magazine, Sniffer listed in “Top Ten Products of the Decade” O

4、ct.2, 2000Network Magazine, Network Magazine “Hall of Fame” , Sniffer ProNetwork Magazine, Product of the Year 1999 Sniffer Pro 98Network Magazine, Product of the Year 1998 Sniffer TNVNetwork Magazine, Product of the Year 1997, Sniffer Pro & Distributed SnifferSecure Computing Magazine 10/99 - Sniff

5、er Pro Five Stars,Sniffer, 十年来最佳网络产品同获此殊荣的产品：MS Windows NT、Novell Netware、Cisco 路由器、Apache Web服务器等等“As the complexity of networks continue to increase, so will the need to keep those networks running smoothly. Sniffer is still one of the best products in the business.”Network Computing, Oct. 2000Net

6、work ComputingTop 10 of the Decade- Sniffer -E-Business 用户Service Provider 用户Field Service: 用户Enterprise 用户Sniffer能够解决的问题提高网络可用时间什么是网络可用时间？为什么重要？提高网络可用时间的因素5个9 (99.999%)Grade of ServiceGoodDegradedSeverelyDegradedOutageProblem Analysis - ManualUser Calls StartSNMPTrapGrade of Service被动的网络管理Grade of

7、ServiceGoodDegradedSeverelyDegradedOutageAutomated Problem Analysis (7x24)Exception NotedResolution主动的网络管理方式Sniffer的工作原理AdapterToolsPacket genBERTPingTrace RouteDNS LookupFingerTriggerName DiscoveryAlarmsMonitor FiltersMonitor ApplicationsDashboardARTHost TableMatrixHistory SamplesProtocol Distribut

8、ionGlobal StatisticsCapture FiltersDisplay FiltersDisplays DecodeMatrixHost TableProtocol DistExpertProbe DirProfilesConfigsAddr BkDatabaseTracesExported DataSniffer 的关键技术Sniffer 产品家族Sniffer (TNV) Network Analysis SuiteSnifferBasicSnifferPro LAN SnifferPro WAN SnifferPro HiSpeed Sniffer Portable Ana

9、lysis SuiteSniffer DistributedAnalysis SuiteSnifferPro Packet Over SONET SnifferPro Reporter DSS/RMON Watch Optical Networking SuiteDWDM SnifferPro Packet Over SONET SnifferPro Wireless (802.11b)WirelessSuite兼容Sniffer ProSniffer BasicWindows 95, 98 or NT (32-bit)Monitoring and Capture on 10/100 Ethe

10、rnet and Token Ring解码210+协议没有专家系统Sniffer Pro LANWindows 95/98/NT/2000Monitor and Capture on 10/100/Full Duplex Ethernet,Token Ring and FDDI解码450多种协议275+ 种专家系统症状和诊断交换机专家系统Sniffer Pro 专家系统具有的自动化特性和易用性提高了生产率寻找 冲突的网络地址 5 seconds vs. 3.3 hours (2,400 times faster)确定网络变慢（重传）的原因10 seconds vs. 40 minutes (2

11、50 times faster)确定响应时间慢的原因 5 minutes vs. 8 hours (96 times faster)Source: NAI Estimates based on actual field experience典型的DNS 问题- P.C.s 不能访问网络SituationThis trace file contains 9 packets that show what happens when DNS configurations are done improperly. In this case, we can see in packets 1 and 2,

12、the client (10.0.0.99) is ARPing for two devices that never answer. Those were the clients first choices as DNS servers, but they are not up currently.In packet 3, we can see the client make a DNS query to 10.0.0.1. The reply (ICMP port unreachable) indicates that the desired port number (53) is not

13、 in use at the destination - 10.0.0.1 does not have the DNS server daemon loaded.The client tries desperately to ARP for his first two DNS queries, but again receives no answer. He again tries 10.0.0.1 and gets the ICMP port unreachable message.Monitoring doesnt see or solve problem.Sniffer Expert System automatically finds problem.应用程序管理Measures Application Response TimeSummary by Server or Detail by Client / Server / ApplicationSNMP Addressable for Reporting Applications (ART MIB) No Impact on End User SystemsSupports All End-user Operating Systems(Probe-based)洞察交换机情况的SnifferSniffer Poll