Abstract: Systems, device and methods are provided for displaying time sorted data events captured in a multi-protocol communications system. Initially, data events are captured in connection with detection of one or more trigger conditions, and each captured data event includes a clock timestamp. The captured data events are then sorted and displayed by a graphical user interface according to their respective clock timestamp. Once the data events have been sorted and displayed, then the temporal relationships and causal relationships, if any, between and among the captured data events can be determined.

Abstract: Systems and methods are provided for facilitating analysis of a communications system through the use of a multi-protocol communications analyzer. A graphical user interface employed in connection with the multi-protocol communications analyzer enables a user to create a new domain, or modify an existing domain, that includes a list of ports selected by the user, where each port is associated with a particular communication link of the communications system. The ports are selected from a list of available ports displayed by the graphical user interface. The ports selected for inclusion in the domain can then be configured, by way of the graphical user interface, as desired. After the domain has been defined, the domain can then be used to analyze one or more of the links associated with the ports included in the domain.

Abstract: Systems, device and methods are provided for determining a reference clock frequency for use by a multi-protocol analyzer in connection with a multi-protocol communications system. Initially, the clock frequencies for each of the links in the multi-protocol communications system are determined. The link clock frequencies are then used as a basis for determining the frequency of the reference clock. While the reference clock frequency is based upon the link clock frequencies, the reference clock frequency is different from each of the reference clock frequencies.

Abstract: Generating program code to be used by a protocol analyzer based on definitional information relating to a data protocol. A protocol database that includes definitional information relating to characteristics of a protocol is stored. The definitional information, which is expressed in a computer-interpretable format, is processed to generate program code expressed in a programming language. The program code incorporates the definitional information and includes logic that is to be executed to interpret and analyze data packets having the protocol. In this manner, the program code to be used by the protocol analyzer is generated mechanically, without requiring software developers. When the program code needs to be updated in view of changes to existing protocols or the introduction of new protocols, the protocol database is updated. These updates are then propagated to the program code without requiring direct manipulation of the code by software developers.

Abstract: A system and method of triggering data capture in a high-speed communications network is disclosed. The triggering system enables the capture of desired data from the network according to triggers related to high-level statistical and transactional elements of the data. The triggering system includes a statistics engine that analyzes network data at the line speed of the high-speed network, thereby enabling the present system to trigger on data transmitted via networks with line speeds exceeding 1 Gbit per second. The present system preferably comprises a portion of a protocol analyzer or similar device in order to detect and diagnose problem conditions existing in or relating to the network data.

Abstract: A programmable data filtering/searching system for use with a data network. The primary programmable hardware-based filtering and searching portions of the system are integrated onto the same printed circuit board as the data storage device to facilitate efficient filtering and searching of data from a data stream coming from a memory storage device after being captured. In addition, the actual hardware and software used to perform the filtering and searching routines is programmable such that various filter and search criteria can be entered and utilized. The data filtering/searching system also uses metadata in addition to the captured data to minimize the time required to perform certain processes on the data from the data stream.