Getting Started

You can begin working with the software immediately after starting it. The main window is shown below. This is the first screen you see when the program starts.

The main menu, the toolbar and the network interface combo box are at the top of the window. The Start capture button starts and stops data capture.

Here is a summary of the functions of each toolbar button:

Starts a new data capture session.

Loads a previously recorded capture session.

Saves the current capture session to a file.

Finds specific packets in the current session.

Opens the address book. The address book provides a place to store information about network hosts for quick access.

Suspends output. May be usefull while capturing a heavy data flow.

Filter options. Clicking on the arrow will open the menu which lets you save the filter for future use.

Opens the program settings window.

Reconstructs TCP packets from the current session into streams such as POP3 or HTTP.

Opens the traffic flow analysis window.

Opens the host activity analysis window.

Opens the protocol distribution analysis window.

Displays this manual.

You can use the three tabs to access the following program features:

Captures data packets transmitted through the network.

Reconstructs TCP data packets into streams. It then displays the data to be transferred via TCP packets.

The packet builder. This is where you can build your own custom data packet and send it into the network.