Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. ©...
Transcript of Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. ©...
![Page 1: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/1.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Microsoft Message Analyzer: New Looks and New Tricks
Paul Long Microsoft
![Page 2: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/2.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
What is Message Analyzer?
Protocol Analysis Protocol Validation Log File Analyzer Deep Data Inspection and Correlation Packet Capture and Event Tracing Collector
2
![Page 3: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/3.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Demo – Inspection and Correlation
3
![Page 4: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/4.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
What’s Different with Message Analyzer?
Message Reassembly and Operations Reduces Noise Increasing Filtering performance Simplifies Application Troubleshooting Simplifies Performance Troubleshooting
4
![Page 5: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/5.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
What’s Unique About Message Analyzer?
Read more than just Network Traces Text Log Files (IIS, NetLogon, SambaSysLog) Event Logs and Tracing (EVTX and ETL) PowerShell CSV/TSV SQL Databases Azure Tables
5
![Page 6: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/6.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
What’s Unique About Message Analyzer?
6
Grouping Pivot Top Users Chart
Gantt Pattern
![Page 7: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/7.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Demo – Pattern Match TCP Sequences
7
![Page 8: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/8.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Messages are Coalesced
Operations – Group related messages, like Requests and Responses
Automatic Reassembly – Fragments for IP, TCP, HTTP, and others are automatically reassembled and stored as a tree
Protocol is Validated – Protocols can be Analyzed and Simulated which allows us to identify differences from the specification.
8
![Page 9: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/9.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Operation Message
Operations and Reassembly
Request Message
Response Message
![Page 10: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/10.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Network Monitor View
10
![Page 11: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/11.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Wireshark View
11
![Page 12: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/12.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Message Analyzer View
12
Measure Performance
Visualize Data
Limit Noise
0.0222278
![Page 13: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/13.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Filtering Differences
13
![Page 14: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/14.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Filtering Difference
14
Filtering always applies to the entire tree. If any node in the tree contains a match, top level message is returned. Even when operations are hidden.
![Page 15: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/15.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Viewpoints
15
Viewpoints let you see messages at layers in the stack. A TCP viewpoint let’s you see all TCP fragments.
![Page 16: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/16.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Viewpoint Filter
16
Viewpoint filters let you apply a filter at the top row under the viewpoint (blue line).
![Page 17: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/17.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Filtering is Fast
17
View Filter: TCP.Port==1234
Port=1234
Port=1234
Port=7777
Port=7777
Viewpoint Filter: TCP.SequenceNumber==1234
Requires looking at 4 messages
Requires looking at only the TCP
fragments in the 2 resulting Messages
![Page 18: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/18.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
What’s New with Message Analyzer
Comparison Tools UI Workflow Improvements Parse As support Performance Improvements
18
![Page 19: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/19.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Demo – Comparison Tools
19
![Page 20: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/20.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Demo – Parse As
20
![Page 21: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/21.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Upcoming Features
21
To be updated later
![Page 22: Microsoft Message Analyzer: New Looks and New Tricks€¦ · 2015 Storage Developer Conference. © Microsoft. All Rights Reserved. Microsoft Message Analyzer: New Looks and New Tricks](https://reader031.fdocuments.in/reader031/viewer/2022011821/5ead8ab3e5d40b189c376bf4/html5/thumbnails/22.jpg)
2015 Storage Developer Conference. © Microsoft. All Rights Reserved.
Useful Links
Blog: http://blogs.technet.com/MessageAnalyzer Latest Download Videos Support Forums
22