Document Number: OSUP1041
Product: Observer 8.x
Date: 01-15-2003
Title: Observer’s Support for Multiple Concurrent Packet Captures

Observer’s Support for Multiple Concurrent Packet Captures

Summary
Observer supports multiple simultaneous captures from a single console. Up to twelve concurrent captures are supported from adapters located on the local system (either from a single adapter or up to twelve separate adapters). Additionally, an unlimited number of simultaneous concurrent captures are supported from remote Probes.

Requirements
To open multiple packet capture windows with Observer, you must have multiple Probes available to the Observer console. These Probes can be run locally or remotely.

Setting up Observer for Multiple Captures
Every Observer console includes one local Probe by default; you may install a second local Probe if you are licensed to do so (Observer Suite includes a license for a second Probe, or you can purchase one separately). The second local Probe can be instructed to bind to the same NIC as the first, or to a separate NIC. To activate the second local Probe, select Options -> Observer General Options and check the Run Local Probe (second Probe) checkbox. Restart Observer to run the second local Probe.

Additionally, a local RMON Probe may be installed for access to 10 more local interfaces (on separate NICs or sharing NICs).

Note: Each additional local packet capture running simultaneously uses additional resources and one should keep an eye on processor utilization to insure no packets are dropped. Each additional remote capture window displayed uses some resource, but since the actual capture is happening at the remote Probe, local processor limitations do not apply.

Starting Multiple Packet Captures
First, select each Probe as you normally would and open the Packet Capture Window (Capture->Packet Capture). Do not click the Play button just yet.

After you have opened a Packet Capture window from each Probe, display them concurrently in the Console window by using CTRL-click to select multiple Probes. There is no limit on the number of open Probe capture windows Observer is able to display simultaneously.

(Click Thumbnail for Larger Image)

Probe Capture Window