Observer Analyzer : Expert Probe Software : Creating a probe instance
   
Creating a probe instance
 
Page Contents
Creating GigaStor active and passive probe instances
Creating and configuring an MPLS probe instance
How to use additional storage volumes on the GigaStor active instance
Revised: 2016-03-07
You can create a probe instance to monitor network traffic seen on a network adapter, explore saved packet captures, and have multiple people be able to see the captured data from their copy of Observer. Create a passive or active probe instance depending on what your goals are.
Prerequisite: Multi or Expert Probe.
When you open Observer for the first time, you assign memory to a probe instance. You can choose to use this one probe instance, or you can create other probe instances. Multiple probe instances are useful if you need multiple users using the same probe simultaneously or if you have specific needs for each probe instance (for instance, packet capture, trending, and so on). See Configuring connections to multiple NICs or Observer for why you would want to use multiple probe instances.
Note: There are several different probe instance types. These include a packet capture-based probe instance used to capture packet traffic, two NetFlow collectors, an sFlow collector, and an MPLS probe. This section describes creating a packet-based probe instance, but the process is similar for the other probe instances, some of which are only available on the Expert Probe. For NetFlow, see Creating a NetFlow collector or NetFlow Trending collector. For MPLS, see Creating and configuring an MPLS probe instance. For sFlow, see .
To set up a probe instance, follow these steps:
1. Do one of the following:
On the probe: Click the Adapters and Redirection tab.
In Observer: Select a probe instance, right-click and choose Administer Selected Probe. Then click the Adapters and Redirection tab.
2. In the upper left, click New Instance. The Edit Probe Instance wizard opens.
If the New Instance button is grayed out, it probably means you do not have enough Observer-allocated memory to add another instance.
If you get a message that says that there is not enough reserved memory to create a probe instance, you must reduce the amount of memory used by another probe instance. By default all of the reserved memory on a GigaStor is assigned to the “Instance 1” active instance. By releasing some of the reserved memory you re-allocate memory from one probe to the pool of reserved memory from which you can create other probe instances, including passive probe instances on the GigaStor. Click the Configure Memory button and reduce the amount of memory for the packet capture buffer.
You must have a minimum of 256 MB RAM to run the probe with a single instance, plus 12 MB for each additional probe instance. See Setting the total system memory reserved for probes for details on allocating memory for Observer probes.
3. Ensure “Probe” is selected in the Instance type. Type a name and description and click Next.
4. Choose an appropriate capture buffer size given the local system's available memory and how much traffic you plan on capturing from the given network.
Statistical reporting uses different memory—and much less of it—than packet capture.
Although it is possible to customize the amounts of memory used by various Observer statistical displays (by choosing a statistics memory configuration), for most situations the defaults work perfectly well. For additional information, see Customizing statistics and capture buffers for probe instances.
a. If you need to create your own memory configuration, click New. The New Statistics Memory Configuration window opens.
b. Type a name and choose a default memory configuration to use. Click Finish. After choosing the memory configuration, you can change how the memory is allocated.
c. Select your newly created memory configuration and click Edit. The Edit Statistics Memory Configuration window opens.
d. Choose your network type. For each Observer statistic, choose how much memory is allocated for it. Click OK.
e. Click Next to continue, and the Select Network Adapter and Redirection configuration dialog is displayed
5. Ensure the correct network adapter is selected and type the IP address of your Observer. Click Finish.
 
 
Creating GigaStor active and passive probe instances
Prerequisite: Expert Probe
GigaStor probe instance creation is only available when you are using the Expert Probe locally on a GigaStor probe and with the program in application mode, not as a Windows service. It is not available if you connect to the Expert Probe from a remote Observer analyzer.
If your GigaStor RAID has more than 256 TB, see How to use additional storage volumes on the GigaStor active instance before continuing.
By default, the GigaStor has an active probe instance called “Instance 1” but does not have any passive probe instances. We recommend that you
Rename the active probe instance by selecting Instance 1 and clicking Rename. Choose a name that is meaningful to you for the probe instance name and click OK. A typical name might be the physical location of this GigaStor.
Have only one active GigaStor instance, unless you have specific reasons to have more.
Create passive probe instances to use.
See details about active and passive probe instances discussed in What is a probe instance?.
After creating your active instance, if you want to change how much disk space is reserved for that active instance, click Configure Instance Storage.
To create a passive probe instance, follow the steps in Creating a probe instance. When you create a probe instance for an Expert Probe on GigaStor, it is automatically created as a passive probe instance.
If you want to change a passive probe instance to an active probe instance, follow these steps.
1. Do one of the following:
On the GigaStor probe: Click the GigaStor Instances tab.
In Observer: Select a probe instance, right-click and choose Administer Selected Probe. Then click the GigaStor Instances tab.
2. Select the passive probe instance you want to promote to an active instance and right-click.
3. Choose Make Instance Active. Your passive probe instance is now an active probe instance.
 
 
 
After completing this task:
You should then create passive probe instances for it.
 
Creating and configuring an MPLS probe instance
Prerequisite: Expert Probe
See Creating a probe instance for details about creating an MPLS probe instance. In Creating a probe instance choose MPLS Probe and follow the on screen instructions.
After the probe instance is created, you may want to configure the probe to tell it what type of traffic is seen.
1. On the Home tab, in the Probe group, click Setup > Probe Properties.
2. On the General tab, use the options in the MPLS Analysis Settings to choose whether Observerhould auto determine IPv4 and IPv6, what all other traffic is ( ATM or Mac Header), and whether to use a four byte pseudowire word.
3. Click OK.
 
 
How to use additional storage volumes on the GigaStor active instance
Revised: 2017-05-05
When expanding your RAID array beyond 256 TB of usable disk space, you must add the additional volumes to your GigaStor active instance.
Prerequisite: Expert Probe
The maximum NTFS disk volume is 256 TB, but with a GigaStor you can have more storage than that by using the expanded disk arrays or striping through Windows.
1. On the GigaStor probe, click the GigaStor Instances tab.
2. Select the Use additional storage volumes option and click Configure.
3. In the message box that appears, click Yes.
4. Select the additional storage volumes you want to assign to your active probe instance, and click OK.
5. In the message box that appears, click Yes.
 
The additional storage is allocated. This may take a few moments.