Protocol analyzers monitor and interpret data on computer networks and storage devices, with different forms available. They can identify transmission errors and track security breaches. Bus analyzers monitor data on storage and computer hardware buses, including USB, RS 232, and PCI. They can optimize performance and identify equipment failures.
A protocol analyzer is a system that can monitor and interpret data as it moves across a bus or computer network. It can usually collect and store a large amount of this data as well. Certain conditions can often be programmed to start and stop the packet capture process automatically. Electronics and software engineers often use protocol analyzers to diagnose problems with computer networks, storage devices, and new circuit designs. A network protocol analyzer or sniffer can also help track security breaches on a wired or wireless network.
These systems come in different forms. Some are completely self-contained devices that cannot be used for any other purpose. Others consist of specialized computer software that runs on a generic laptop or other portable system. A third type of protocol analyzer includes software and hardware that must be used in conjunction with a general purpose logic analyzer. The amount of data storage available and the possible set of conditions that can trigger data collection vary depending on the design of the particular system.
A logic analyzer can monitor a group of signals in an electronic circuit in real time, monitoring the logic state of each signal. A protocol analyzer can also interpret the data represented by the signals it is tracing. For example, a network analyzer can decode and display Ethernet hardware addresses, Internet Protocol (IP) addresses, and other packet data passing through the monitored connection. There are analyzers for a large number of computer and network bus types, and they can often interpret dozens of common protocols. Systems can usually identify bad packets and other types of transmission errors as well.
Network protocols such as IP, Internet Message Access Protocol (IMAP), and Point-to-Point Protocol (PPP) are often recognized by a packet analyzer. File Transfer Protocol (FTP), Secure Socket Layer (SSL) and many other protocols are also often supported. A modern network protocol analyzer can interpret traffic on Ethernet, Fiber Channel, or wireless networks, among others. It can often generate both good and bad network packets for testing purposes. An analyzer usually connects to a hub or switch, either via a regular network port or a monitor port which allows it to see traffic on both sides of a switch.
The data exchanged between computer systems and disk drives can be monitored with a special type of protocol analyzer called a bus analyzer. Similar to a network analyzer, it can interpret data on Small Computer System Interface (SCSI), Serial Advanced Technology Attachment (SATA), and other types of storage buses. It can often analyze such data even when it is encapsulated by additional protocols for transport over Fiber Channel, IP or Ethernet. A very complex analyzer can monitor packets moving between servers, switches and storage devices over a high-speed Storage Area Network (SAN). This type of analyzer can help optimize performance, optimize resources, and identify equipment that has intermittent failures on a SAN.
The Universal Serial Bus (USB), Recommended Standard (RS) 232, and Peripheral Component Interconnect (PCI) also have their own bus analyzers. Like storage device buses, these computer hardware buses include their own unique data transfer protocols and signal timings. A bus-specific protocol analyzer can use an existing computer system or logic analyzer to monitor, decode, and store control transfers and data packets. Bus transactions, requests and events can be monitored for later analysis, along with any detected errors and anomalies.
Protect your devices with Threat Protection by NordVPN
