Symantec 10521146 Administration Guide - Page 172
TCP Number of Streak Packets, Miscellaneous parameters, Streak Interval
UPC - 037648268134
View all Symantec 10521146 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 172 highlights
172 Detecting Configuring sensor detection You can troubleshoot a noisy network by increasing the value without changing Streak Interval. The sensor then takes a larger sample at each interval and gets more accurate results, at the cost of impacting system performance somewhat. This parameter should not be changed without a thorough understanding of how it interacts with Streak Interval and UDP Number of Streak Packets. TCP Number of Streak Packets TCP Number of Streak Packets regulates how many TCP packets to analyze. The sensor collects all unacknowledged packets in a given streak interval, analyzes them for similarities and streak patterns, and reports on them. The default value of 128 collects 128 unacknowledged packets. Valid values range from 3 to 256, inclusive. If you notice large streaks, you can increase the value to collect more packets for analysis at the cost of slowing performance somewhat. UDP Number of Streak Packets UDP Number of Streak Packets regulates how many UDP packets to analyze. The sensor collects all unacknowledged packets in a given streak interval, analyzes them for similarities and streak patterns, and reports on them. The default value of 128 collects 128 unacknowledged packets. Valid values range from 3 to 256, inclusive. If you notice large streaks, you can increase the value to collect more packets for analysis at the cost of slowing performance somewhat. Counter Number of Streak Packets Counter Number of Streak Packets regulates how many packets to analyze. The sensor samples packets proportionally to thresholds set on Threshold parameters, analyzes them for similarities and streak patterns, and reports on the results. The default value of 36 collects 36 packets for streak analysis. Valid values range from 3 to 256, inclusive. If you notice large streaks, you can raise the value to collect more packets for analysis. This slows performance somewhat. Miscellaneous parameters The following parameters regulate saturation, streak analysis, and slow scan detection.