Capture

The first step in analyzing your network traffic is to capture a number of network packets. To start the data capture, click the Start Capture button in the main window of the program or choose Capture - Start Capture in the main menu.

Depending on the settings you have selected, all or some of the packets are then processed and presented as in the following screen shot:

Packet Decoder

This displays the packet headers and data in an easily readable form. Right-click on this window to pop up a local menu. This menu allows you to expand or collapse the data tree and save it to a text file. It also has some node copy functions.

Session

This shows a set of packets captured from the network. Right-click to invoke the popup local menu to send selected packets to the network or copy any packets you need to the packet builder.

Packet Editor

This screen displays a selected packet. You can edit the packet and then send it back into the network.

You can use the packet editor to modify the contents of a packet and perform the following functions:

Saves the packet to a file.

Changes the size of a packet.

Updates the packet in the current session.

Sends the packet to the network.

Changes the packet encoding. The following code pages are supported: WIN, DOS8, ASCII, MAC, and EBCDIC/IBM.