Observer® Standard: A network monitor and protocol analyzer for Ethernet, Wireless 802.11b/a/g, Token Ring and FDDI networks.

Observer Standard provides metrics, capture and trending for both shared and switched network environments.

Observer Standard is a cost-effective, software-only, Microsoft Windows-based network monitor and LAN troubleshooting tool. Observer Standard can monitor single-segment LANs/802.11 networks and with the addition of Probes, Observer Standard can be upgraded into a full distributed product for monitoring multi-segment LANs, 802.11 networks and WANs. Observer Standard offers both real-time monitoring and troubleshooting, as well as a complete trending and baselining collection system to  view historical data collected for days, weeks, months or even years.

Observer Standard can be upgraded to Observer Expert or Observer Suite to track multiple SNMP-enabled devices, view data from any RMON1/2 or HCRMON probe, provide expert analysis and modeling, or display Web based reports. The Observer product line can provides a complete management solution for even the most complex LAN/802.11/WAN environments.

Observer's Main Console (click for larger image)

With Observer, a network administrator can view his or her LAN more clearly, see network traffic in real time, and with this new information, make network decisions based on facts instead of guesswork. Observer removes the mystery of what is being sent or received by LAN stations.

• Convert your PC or laptop into a powerful protocol analyzer
• Instantly assess the effectiveness of network changes
• Switched modes see all ports on a switch gathering statistics from the entire switch or packet capture from any port or ports
• Monitor and graph real-time bandwidth utilization, save historical data
• Use the Efficiency History mode to baseline your LAN - check efficiency in the future using this baseline value for change determination
• Collect Network Trending using advanced sampling for days, weeks, or months; graph, chart or create comparative reports
• Collect statistics by user, packet size, or protocol (chart or list)
• Capture, view, and decode LAN traffic in real time. Decode TCP/IP, IPX/SPX, NetBIOS/NetBEUI, AppleTalk, DECnet and SNA, using advanced pre- and post filtering, station, protocol and offset filtering (over 500 protocol decodes)
• Chart Protocol and Subprotocol usage, including all IP services (i.e. telnet, ftp, HTTP, NNTP, LPD/LPR, NFS, etc.)
• Network activity display shows at a glance critical performance information
• Traffic generator and packet buffer replay for stress testing, problem duplication
• Set triggers/alarms to analyze LAN traffic and pinpoint critical problems automatically
     - triggers can activate message windows, captures, logs, trouble tickets or execute      external programs (email or pager for example)
• Vital signs display network errors as they happen, historical record saved
• Router Observer displays a router's traffic patterns in real time (up to 8 routers tracked)
• Show Ethernet, Token Ring and FDDI errors by station
• True layer 3 filtering (by IP address), and displays

Observer is the only tool that can truly and effectively stop multi-vendor fingerpointing. Once a problem has been captured, there can be no argument as to where the problem is located and which vendor is responsible.

Observer offers several modes of analysis to help you isolate specific network problems by focusing on different aspects of your network.

Observer Q&A:
Example problems Observer can help isolate:

Can't Print?
Observer helps you see whether the station is sending and if the server is responding.

Host sessions are "hanging"?
Observer's capture and decode will show which system sent the last packet and which system failed to respond-host or workstation.

Slow screen updates?
Observer's delta time stamps show which system is waiting, and which system is lagging in its reply.

Is your UNIX (TCP/IP) or NT server re-sending fractured or incomplete packets, forcing multiple retransmissions?
Observer's Packet Capture will capture the interaction between stations and server and thus provide the hard evidence you need to pursue the problem.

Can't log in?
Packet Capture can display login negotiations, retransmissions and response times to determine where the problem is.

Implementing VoIP, and need a tool to verify performance and check compliance?
Observers complete decode of H.323, including VoIP, insures you will have the tools you need when voice and data problems arise.

Wondering about how much time your employees are spending on the Web?
Internet Observer, and the associated trending facility keeps an ongoing record of all internet activity, including sites visited, how long each user was at each site, and how much data was transferred. Reports can be generated on individuals' Internet usage over time.

Is your Web server servicing requests in a timely manner?
Web Observer shows your web server's average response times and gives you a view of who is on your server, and how much traffic each client is generating.

Do you need a faster WAN/Internet connection?
Router Observer shows one minute and one hour averages for router usage statistics.

What is your switch throughput?
Observer's Switched Bandwidth Utilization shows switch throughput and effective switch efficiency.

What ports/stations are consuming all switch resources?
Observer's Switched Top Talkers shows how your switch is being utilized port-by-port.

Features
Major function sets are outlined below. Click on “Learn More” for each feature set to see more detailed information.

Packet Capture and Decode
Observer offers complete packet capture at wire speeds up to 100MB Ethernet, and Gigabit capture via a switch’s span port. Packet capture displays show total traffic, captured traffic and dropped packets (if any). Comprehensive  filtering options include by MAC and/or IP address, an extensive set of included offset and protocol filters, the ability to create your own, include/exclude, error and range options.

Observer’s protocol decodes now number well over 500, and over 4000 unique frame types are identified. Once traffic is captured, extensive post filtering and auto-creation of offset filters is available.  

Real-Time Network Statistics
Flow based statistics are available for all network speed up to Gigabit . Each statistics display offers multiple ways to view your data, including graph, chart (2-D, 3-D, pie), dial and listing. Network Statistics help you quickly identify trends and network abnormalities, or test throughput and verify observations. Statistics are offered in real-time for any segment or server, and using Observer’s unique switch management console, by port or ports in switched environments. Statistics include:
   • Bandwidth Utilization
   • Internet Observer
   • Network Activity Display
   • Network Errors-by-Station (Ethernet, Token Ring, FDDI, and Frame Relay)
   • Network Vital Signs
   • Network Pair Statistics (Matrix)
   • Protocol Distribution
   • Size Distribution Statistics
   • Top Talkers
   • Utilization History
   • Utilization Thermometer

Full 802.11b/a/g Wireless Support
Because Observer includes complete decode, statistics, error tracking and trending for your 802.11b/a/g WLAN, there is no need to purchase additional software to manage your complete network. All versions of Observer include wireless support, and when running Observer switching between monitoring your WLAN and your LAN is two mouse clicks away. In addition to complete integration throughout all Observer modes, specific wireless modes include displays for:
   • Wireless Site Survey
   • Wireless Network Vital Signs
   • Wireless AP Statistics
   • Wireless Types by Station
   • Wireless Speeds by Station (cumulative)
   • Wireless Latest Statistics
   • Wireless Errors by Station
   • Wireless Channel Scan
   • Wireless Triggers and Alarms (to detect errors and intrusions)

Utilities to Help You Get Your Job Done
Observer includes many utilities and “One Button” solutions that let you get to the root of the problem - quickly and efficiently. From router tracking and reporting to automatic discovery of network names, Observer streamlines the job of troubleshooting. Each utility is designed to minimize the amount of work required to isolate a specific problem or trend, and quickly display the required information to solve the problem at hand. Click on the “learn more” icon above to read in detail about:
   • Efficiency History
   • Router Observer
   • Web Observer
   • Traffic Generator
   • Replay Packet Buffer
   • Discover Network Names
   • Ping/Trace Route
   • SNMP MIB Walker

Long Term Network Trending and Reporting
Observer’ trending facility collects and stores network, Internet and switch data for days, week, months or even years. View a single time period (i.e. a day or month), or create a period to period comparison reports. The graphical viewer offers text-based, graphical or Web-based reports. Statistical data is optimized for feedback without being forced to maintain volumes of unnecessary data.  

Switch Management
Observer bridges the gap between switches and protocol analyzers by offer a number of methods to manage your switched LAN/WAN. The standard Observer product offers two methodologies for protocol analysis of switched devices - port based mirroring to view a specific devices traffic or to do packet capture (all managed from within the Observer console), or port looping to build a statistical view of all ports on a switch to judge switch performance and see aggregate problems as they develop.

Other Observer Features
Read/write Sniffer® Formatted Packet Buffers - Observer can be used as a capture facility to collect and save packet captures in NAI Sniffer® format (*.enc and *.cap formats).

Observer Station Hardware/Software Requirements:
Minimum: Windows 2000, a supported network adapter, a mouse, and a VGA color monitor running in 800x600 mode.

Recommended: Windows XP, Network Instruments' ErrorTrak 16 bit network adapter, a fast 16 bit VGA adapter, and a color monitor running in at least 1024x768 resolution.

Network Interface Cards Supported: Any network adapter card with a NDIS 3.0/3.1 (or greater) driver that supports promiscuous mode (PCI cards recommended for Fast Ethernet). For Wireless 802.11b Cisco Aironet 340-350, Symbol Spectrum24-41x1, Intel 2011b and Nortel 41x1 adapters or compatible, for 802.11a - Proxim adapters or compatable. For 802.11 b/a - Atheros compatable. For 802.11a/b/g - Atheros compatable including Linksys and Netgear.

Switch Requirements: For using Observerþs looping Probe option, your switch must support port mirroring and have a SNMP (preferred) or telnet management interface.

For Using Observer's Ethernet Station Error Statistics: Network Instruments provides a driver for the Intel/DEC 21143 chip set adapters (PCMCIA, ISA or PCI). Network Instruments manufactures and offers NICs in both PCI and PCMCIA CardBus formats.

Operating Systems Supported: Microsoft Windows 2000/XP.

Topologies: Ethernet (10/100/Gigabit), Wireless 802.11b/a/g, Token Ring (4/16Mb), FDDI, and WAN (T1, E1, DS3, HSSI, E3).

Licensing: Observer's license is for one PC on one LAN on one site. If Observer is to be installed on a laptop, each laptop must have a separate Observer license.

Observer may run on systems with less power and RAM than those listed above, but Network Instruments does not support configurations with less than the minimum stated requirements.

Observer® is a registered trademark of Network Instruments, LLC