Other Features
This section describes the features and options of the software that are not included elsewhere in this manual.
Ethernet Card Manufacturer Lookup
This tool allows you to look up a manufacturer name by MAC address. To look up a manufacturer name, click Tools - Ethernet Card Manufacturer Lookup, enter a MAC address and then click Lookup.
Address Book
The Address Book provides a convenient place to store information about network hosts for easy access. To open the address book select from the main menu Tools - Address Book.
Net Stat
The SoftPerfect Network Protocol Analyzer includes a network tool called Net Stat. This tool allows you to see the network connections of your computer and find ports in "listen" mode (ready for connection processing). To activate Net Stat select Tools - Net stat from the main menu.
Export Report
The SoftPerfect Network Protocol Analyzer can export captured packets to text files in various formats. To do this select from the main menu File - Save Report As.
Merging/Splitting captures
How to split a large capture file into smaller files, or merge multiple capture files into a singe large file, see the corresponding topic.
File Formats
This section describes the formats of the files that the SoftPerfect Network Protocol Analyzer uses. You can use files generated by the SoftPerfect Network Protocol Analyzer in other utility programs. Note that, unlike other network analyzers, the file formats are all open. They are described below.
CAP - is a capture file in which captured packets (sessions) are stored.
| Offset |
Size |
Name |
Description |
| 0x0 - 0x2 |
3 Bytes |
CAPSIGN |
Signature line. This string value always equal to "CAP". |
| 0x3 |
1 Byte |
CAPVER |
In this version of the software the value is always 1. |
| 0x4 - 0x7 |
4 Bytes |
VTOTAL |
A long integer number (DWord). It is equal to the total number of data packets in a file. |
| VTOTAL packet records then follow the above header data. Here is the format of each variable length packet record: |
| - |
8 Bytes |
TIMESTAMP |
A Double type number holding the date and time the packet was received. |
| - |
2 Bytes |
PKTLEN |
A Word type number, which gives the packet's length. |
| - |
PKTLEN |
PKTDATA |
A block of PKTLEN length. This is the packet's data. |
RAW - is a type of file containing just a saved packet as the original sequence of bytes.
XML - is a filter file. It is a typical XML file where the filter settings are saved. You can gain more information about it by simply viewing it as a text file.
| 
