Expert memory usage
You can set an upper limit on the system resources available to Expert Analysis functions in each individual capture window. For a Capture Engine, these resources are resident on the computer on which the particular Capture Engine capture window was created.
The Memory Usage section of the Expert EventFinder Settings window has two ways to set the maximum memory
• Enter the value directly in MB (megabytes)
• Use the slider bar to set the value
Values for the Maximum Flows and Maximum Events that can be analyzed using the amount of memory you have selected appear below the edit box and slider bar.
The Maximum Flows and Maximum Events represent two separate limits. When the maximum number of flows is reached, older, closed flows will be dropped to make room for new ones. If there are more active flows than this limit, no new flows will be added, but the Expert will continue to analyze existing flows, as well as look for non-flow events for all network traffic.
The Memory Usage feature allows the Expert to be used continuously, always presenting the most recent findings, and logging the results to the Event Log.