Observer Analyzer : Observer Analyzer : Expert Analysis : Using MultiHop Analysis : How to use IP mapping in MultiHop Analysis
How to use IP mapping in MultiHop Analysis
Many devices in your network environment can perform Network Address Translation (NAT), such as routers and load balancers. As NATing occurs, the IP address of the network device changes, and, if not accounted for in Observer, would cause issues with the MultiHop Analysis tool because it is designed to follow an address through its entire journey. The IP mapping option exists so you can tell Observer, for example, that local IP address 10.0.36.100 is the same station/device as 218.xx.xx.xx on the full Internet.
Tip! IP mapping assumes you know exactly how one IP address translates to another after NATing. After you study how the devices in your network are NATing, IP mapping becomes a quick and simple process.
Note: The following steps assume you have already loaded two or more segments into MultiHop Analysis. See Using MultiHop Analysis and Quickly using MultiHop Analysis.
To use IP mapping in MultiHop Analysis, complete the following steps:
1. On the Home tab, in the Analysis group, click MultiHop Analysis.
2. Click the Select Files to Analyze button.
3. Double-click a file segment to edit it. The Edit File Segment dialog appears.
4. Enable the Apply IP Mapping setting.
5. Click the Settings button. The IP Mapping Settings window appears.
6. In the Profile area, click Add to create a new profile.
7. Click the Add button, and type the IP addresses that should correspond to each other after NATing.
For example, specify that the IP address 10.0.36.100 is the same station/device as 218.xx.xx.xx on the full Internet.
8. Repeat the process for each desired IP mapping and for each segment file (if necessary).
9. Click OK twice to confirm and save your changes.