Analysis Profile

Analysis Profile is just like the container for containing the settings for an analysis project, to provide flexible, extensible and effective analysis performance. All settings in analysis profile are memorized by the program when the program or even the operating system is shut down, and can be applied to other analysis projects.

On the Analysis Profile section on the Start Page, there are eight built-in analysis profiles as follows:

Analysis profile	Description
Full Analysis	Provides comprehensive analysis of all the applications and network problems.
Traffic Monitor	Provides traffic statistics and high efficient analysis of main objects, including MAC addresses, IP addresses and protocol.
Security Analysis	Provides dedicated analysis of potential network security risk.
HTTP Analysis	Analyzes Web applications (based on HTTP) and record clients' web activities and web communication logs.
Email Analysis	Analyzes Email applications (based on POP3 and SMTP) and monitor Email content and attachments and log Email transactions.
DNS Analysis	Analyzes DNS applications, diagnose DNS applications errors and record DNS application logs.
FTP Analysis	Analyzes FTP applications (based on TCP port 21 and 20) and FTP transaction logs.
IM Analysis	Provides instant messager analysis.

Different analysis profiles load different analysis modules and have different packet filters to analyze specific network traffic. You can also create, edit, duplicate, and delete an analysis profile by right-clicking any analysis profile on the Analysis Profile section:

Edit: Opens the Analysis Profile Settings dialog box to edit the selected analysis profile.
New: Opens the Analysis Profile Settings dialog box to create a new analysis profile.
Duplicate: Duplicates the selected analysis profile and make changes on the copy.
Delete: Deletes the selected analysis profile.
Reset: Resets the Analysis Profile.

The Analysis Profile Settings dialog box includes following tabs:

Analysis Settings: Configures the basic settings of an analysis profile.
Analysis Object: Sets which objects to be analyzed and the maximum number of each object.
Diagnosis Settings: Sets the thresholds for diagnosis events.
View Display: Shows/hides the statistical views and rearranges the order of those views.
Packet Buffer: Configures the buffer size, buffer mode and configure how to save packets in the buffer to disk.
Packet Filter: Sets filters for capture.
Packet Output: Automatically saves packets.
Log Settings: Customizes all available log settings to get useful log records.
Log Output: Automatically saves logs.
Security Analysis: Sets the conditions to detect the hidden security problems. Only available when the analysis profile of Security Analysis is applied.

You can also configure the analysis profile settings when the analysis project is running.
The Analysis Settings tab is only available when the Analysis Profile Settings dialog box is opened from the Start Page.

Back