System information
Getting Started with Expert Analysis
 271
You may also view the Expert Thresholds (OSI Model) display by clicking the 
 button.
Expert Thresholds define what parameters are used when determining if a particular event 
is a problem or not. Thresholds are set for all Expert events, and for some events, more 
than one threshold is set. For example, for TCP Bad Checksums, only the number of 
frames during the entire capture process is set. For FTP Session delays, values are set both 
for slow connect and slow response, as well as values for grading marginal and critical for 
both. In addition to these, values for network and WAN/Internet response times values are 
set.
Because of the potentially large number of values that are required and because a number 
of different network/WAN/Internet configurations dictate predictable value sets, Real-
Time Expert Thresholds permit the user to save profiles for sets of values. The Thresholds 
configuration displays are loosely based on the OSI model, separating different expert 
items from where in the communications stack the item is found.
Each item can be turned on or off by checking the box in the “On” column. The fewer 
items that are checked, the less memory used by Observer, and the less processing time 
will be occupied by the Expert Analysis.
Expert Threshold Profiles
Configuring profiles is started from the top section of the Expert Thresholds (OSI Model) 
display. 
EDIT
PROFILES
button
SET
DEFAULTS
button










