Capsa Updates
August 5, 2022 - Colasoft Capsa Enterprise 15.1
New Features:
- Add global display filter function, users can set the global display filter in the analysis interface.
- Add host behavior analysis, analyze the network behavior of IP and services through statistical traffic data.
- Add filter expression session. Decrypted payload in TCP conversion, for details see Online help (F1).
- Users can directly set various items of analysis settings on the start page, and can customize the items to be set in the analysis settings.
- Add advanced filtering function for global display filter, users can write the relationship (and, or, not, and group) between each filter item through the advanced filtering function.
- Add judgment prompts for packet view. TCP Window Full (red), TCP ZeroWindow (red), and TCP Window Update (prompt).
- Add exporting pictures function to transaction sequence diagram in TCP transaction analysis.
- Add conversation TTL field for TCP conversation and UDP conversation.
Improvements:
- Improve the stuttering problem when switching views under large data volumes.
- Improve the memory usage during product startup, greatly reducing the memory usage during startup.
- Optimize the allocation and use of packets display cache, improve the utilization of system memory in the analysis process. Users can customize the maximum packets display cache size.
- Improve Colasoft Packet Builder tool, support batch editing and packets and support the creation of more packet templates.
- Improve online query function of threat intelligence.
February 26, 2020 - Colasoft Capsa Enterprise 13.0
New Features:
- Internet IP device identification feature is added.
- Replay analysis supports wireless packets decryption.
- Users can locate related conversations from the Diagnosis Details tab.
Improvements:
- Packets can be exported in libpcap-nanosecond type.
- Analysis Profile and Network Profile are merged to be Analysis Settings.
- Analysis settings are independent per project.
- Users can configure whether to stop analyzing when available memory is less than a specified threshold.
- Users can view traffic logs on lower panes.
- In DPI filter mode, conversation views support script-based display filters.
- Reconstructed files will be saved in one file folder every 1,000 conversations.
- Format-supported trace files can be replayed without file extension.
Bugs Fixed:
- Email analysis for some IMAP4 conversations may cause Capsa locked.
- HTTP logs cannot be exported automatically.
- VoIP analysis may cause crash.
- DPI filter with specific rules doesn't take effect.
- Copying or exporting the hex data on Hex view of data Flow tab may cause Capsa to crash.
- IP addresses may be grouped wrongly.
- Routing Loop and Physical Loop events of Diagnosis settings are displayed as unchecked even though they have been checked.
July 23, 2019 - Colasoft Capsa Enterprise 12.0
New Features:
- A full traffic decoding feature is provided.
- DPI filter is provided.
- Decoding script editor tool is provided.
- A Service view is added to provide service access statistics.
- TCP graph stream is added for TCP conversations.
Improvements:
- Add national flag to geolocation.
- The hex display of client and server data for TCP and UDP flow is colorized.
- Users can customize column width or set the column width to default by right-click or shortcut.
- Users can modify time display precision via Options -> Display Format -> Time precision.
- IP address location information can be obtained via a find function.
- The analysis for huge packets is optimized.
- The packets with incorrect IP header checksum will not be corrected.
April 25, 2018 - Colasoft Capsa Enterprise 11.1
New Features:
- Users can select which packets they want to replay according to their requirement
- Packet storage filters are provided
- Exporting the packets of HTTP conversation in TCP Conversation view is supported
- Advanced filter can be imported and exported
Improvements:
- The IP address library is updated
- The log view is sorted by packet timestamps
- Sorting conversations by time as default
- The function of packet compulsive decoding is optimized
April 25, 2018 - Colasoft Capsa Enterprise 11.1
New Features:
- Users can select which packets they want to replay according to their requirement
- Packet storage filters are provided
- Exporting the packets of HTTP conversation in TCP Conversation view is supported
- Advanced filter can be imported and exported
Improvements:
- The IP address library is updated
- The log view is sorted by packet timestamps
- Sorting conversations by time as default
- The function of packet compulsive decoding is optimized
February 12, 2018 - Colasoft Capsa Enterprise 11.0
New Features:
- IPv6 packet analysis is provided
- Endpoint analysis and conversation analysis based on IPv6 is provided
- Files transmitted over HTTP protocol can be reconstructed, including HTML files, images, CSS, JS, EXE, etc
- Files transmitted over FTP protocol can be reconstructed
- SSL certificates can be reconstructed
- RTP flow can be analyzed when signaling packets are not captured
- An SSL Log sub-view is added to the Log view.
- An X-Forwarded-For field is added to the HTTP Log view
Improvements:
- Capsa can remember the file path for last replay
- A "Path" column is added to the Replay tab to display the path of the packet file
Bugs Fixed:
- Sometimes, the event Duplicated Acknowledgement was misjudged
July 26, 2017 - Colasoft Capsa Enterprise 10.0
New Features:
- An Interaction Diagram column and a Transport Layer Max ACK Time column are added for TCP Conversation view
- A Payload column is added for TCP Conversation view and Packet view.
- Audio and video can be played for SIP VoIP calls based on following codecs: G.711/a, g.711/u, GSM, BV32, Speex, PCM, H.264 (unencrypted), H.263(unencrypted), Mp4v-es
- Audio and video can be played for H.323 VoIP calls based on following codecs: G.711/a, g.711/u, GSM, H.264(unencrypted), H.263 (unencrypted)
Improvements:
- VoIP analysis is improved to support both SIP and H.323 protocol
- MAC address library and IP address library have been updated
- The calculation for TCP conversation metrics has been updated
- Average bps, average utilization, and average pps are added for traffic statistics
- Packet timestamp supports nanosecond, and some statistics are accurate to nanosecond
Bugs Fixed:
- Capsa crashes when the Packet Decoding pane is minimized to zero
- The packet is identified as retransmission when the previous packet sequence number reaches the 32-bit integer limit
- Capsa sometimes hangs on the initializing page when starting a project
- Capsa sometimes crashes when saving the statistics on the Diagnosis view
- Network adapters occasionally cannot be detected on Windows 10
January 19, 2017 - Colasoft Capsa Enterprise 9.2
New Features:
- HTTPS packets can be decrypted with key files
- Application based traffic analysis and statistics are available
- An Application view and an Application Explorer are provided
- More than 1800 built-in applications are provided
- Custom applications are available
- A Base64 Codec is provided
Improvements:
- A Protocol column is added for the Port view
- A Dup Ack mark is added to the Summary column on the Packet view
- The display of top charts is optimized
- The display on HiDPI screen is optimized
- IP address conflict detection is optimized
Bugs Fixed:
- The Find box cannot be called out from the Node Explorer
- Packets cannot be located for a specific diagnosis event on the Diagnosis view
September 6, 2016 - Colasoft Capsa Enterprise 9.1
New Features:
- Conversation filter is provided to define filter rules for MAC/IP/TCP/UDP conversation
- Packets can be decoded as specified protocol
- Packets can be filtered based on time rule
- Enable batch address/port input for advanced capture filter
- A Time Sequence tab is added for DNS-based conversation
- The protocol PPP for POS can be recognized and decoded
Improvements:
- Name table file supports .csv format
- An option is added to enable/disable the automatic loading of packet files replayed last time
June 21, 2016 - Colasoft Capsa Enterprise 9.0
New Features:
- Network traffic can be analyzed based on local processes
- A Process view and a Process Explorer are provided
Improvements:
- bps calculation is optimized
- No "Limited Group" for Node Explorer
- View Display is optimized
- Conversation data display is optimized.
- IP address geographical information library is updated for Colasoft Ping Tool
- User interface display is optimized for Colasoft Ping Tool
- MAC address manufacturer information is updated for Colasoft MAC Scanner
Bugs Fixed:
- Chart cannot be saved sometimes for Colasoft Ping Tool
March 29, 2016 - Colasoft Capsa 8 Enterprise 8.3
Improvements:
- The recognition of some protocols is more accurate
Bugs Fixed:
- The Windows 10 operating system logs off from time to time when starting Capsa
- Added name table cannot be auto-saved
- Packet files with capitalized extension cannot be replayed
- Log View settings in Analysis Profile cannot be auto-saved
- For wireless analysis, no packets are shown on the Packet view when a MAC address is selected in the Node Explorer
Feburary 23, 2016 - Colasoft Capsa Enterprise 8.2
New Features:
- Support analyzing the traffic of 2-channel wireless AP.
- Support displaying decoded data in hex in Data Flow sub-view in TCP Conversation view and UDP Conversation view
Improvements:
- Optimize the display of Data Flow sub-view in TCP Conversation view and UDP Conversation view
- Support recognizing 1546 protocols and sub-protocols
December 15, 2015 - Capsa Network Analyzer 8.1
New Features:
- Add online auto-update feature.
- Add conversation filter.
- Add signature recognization of DNS packets.
Improvements:
- Optimize the interface of TCP Flow Analysis.
- Optimize system architecture, upgrade from 32-bit to 64-bit version.
- A maximum of 100,000 analysis objects are supported in 64-bit version. Packet buffer size can be set as the total idle RAM of the system.
- Analysis performance is improved greatly.
- Add field sorting capability in the Log view.
- Support recognizing 1040 protocols and sub-protocols, support decoding 142 protocols.
Bugs Fixed:
- Fix the problem of command line calling error.
June 17, 2015 - Capsa Network Analyzer 8.0
New Features:
- The third-generation Colasoft Traffic Recognition Engine (CSTRE) provides more accurate protocol and application recognition.
- Add IP fragment packet decoding capability.
- Add HTTPS stream reassembly decoding capability.
- Support auto-resolution of domain name and host name.
- Protocol decoding content can be exported.
- Add two diagnosis events: physical loop and routing loop.
- MAC/IP/TCP/UDP Conversation View can be located directly from Packet View.
- Add packet time shift function to Packet View.
- Support chunked encoding reassembly and gzip compression decoding in HTTPS stream reassembly content.
- Colorizing the packets for a conversation in MAC/IP/TCP/UDP Conversation View.
- Support running Capsa with command lines.
- 83 new protocols supported: NJACK,6LoWPAN,Adwin-Config,PEEKREMOTE,Etch,AppleMIDI,AR Drone,ACN,ARTNET,BSSGP,TUXEDO,BFD Control,Bitcoin,BT DHT,XCSL,Auto_RP,CWLCCP,Clique-rm,CTDB,CIGI,DPLAY,DCC,DVB-S2,E100,DCP(ETSI),XMCP,GIOP,GPRS,HiSLIP,IEC MMS,IEEE_1588,iFCP,Interlink,ICEP,Kismet,LANforge,LBMR,LAPD,PKTGEN,LBT-RM,LBT-RU,MAC-LTE,MSRP,MS SGSN LLC,Mojito,NORM,NBD,OSC,openflow,PVFS,Pathport,PDCP-LTE,IEEE_1588_PCSP,PANA,RLC,RTPS,RedbackLI,RLM,RMCP,RPCAP,RELOAD,RLC-LTE,SERCOSIII,SAP 822,SPRT,H1,SKTP,Spice,StarTeam,SDCP,Teredo,UDT,UCP,UMA_M,MIOP,BT-uTP,VNC,WOL,waveagent,MQ,WLCCP,YMSG and ZIOP.
Improvements:
- Address Resolution Options is added.
- Network Profile is enabled by default when creating a project.
Bugs Fixed:
- TCP data reassembly display is not accurate.
- Crash caused by repeated clicks of Replay button after packet replay storage space is full.
August 20, 2014 - Capsa Network Analyzer 7.8 Released
New Features:
- Adds VoIP analysis, including VoIP analysis profile, call statistics, VoIP dashboard, diagnosis, logs, reports, and VoIP Explorer.
- Domain based statistics is available.
- Advanced display filter for packets.
- Port based statistics is available
- IMAP4 based emails can be analyzed.
- Windows Server 2012 support (except for Colasoft Packet Builder).
Improvements:
- The Packet tab for the TCP Conversation view is optimized to be identical to the Packet view.
- The color scheme for TCP Transaction Summary Pie Chart is improved.
- Dashboard is optimized to provide more default graphs.
- Several built-in reports are added to the Report view.
- Default Packet Buffer is increased to 128 MB.
February 26, 2013-Capsa Network Analyzer 7.7 Released
New Features:
- Adds the identification and decoding of the protocols: SIP, SDP, MEGACO/H.248, MGCP, Q931, SAP, H.225, RMI, Oracle, MMS, GOOSE, SMV, and GMRP.
- Alarm notification now by both audio and email.
- Added Custom Reporting capability for individual nodes within the Node Explorer.
Bug Fixed:
- The Analysis Profile Settings dialog box could not be closed when a scheduled project was running.
- Restored the manufacturer information for the Colasoft MAC Scanner.
- Resolved Checksum Error in the Summary column on the Packet view when decoding UDP protocol under IPv6.
- Eliminated program crash during packet file replay.
- No packets were captured when a capture using multiple NICs was stopped and restarted again.
June 19, 2012-Capsa Network Analyzer 7.6 Released
New Features:
- You can now schedule task to automatically start a new analysis project at specified time.
- Configurations of the program can be exported and imported. The configurations include the settings of network profile, analysis profile, dashboard, matrix and report.
- Display filters are provided for isolating and viewing particular items.
- You can now add new report with user-defined name and optional statistic items.
- Packets can be highlighted and noted.
Improvements:
- Logs can be automatically saved in *.csv format.
- Capsa can now identify encryption type of AP automatically.
- An MAC address column is added to the Log tab.
- Settings for analysis profile have been optimized.
- Local engine settings are merged into Options on the Menu button.
- Capsa can now decode Tunnel IP in IP protocol.
- The analysis profile, Protocol Analysis, is removed.
Bug Fixed:
- The layout of columns, including column arrangement and column width, cannot be memorized.
- The Find dialog box cannot remember the search content typed last time.
September 26, 2011-Capsa Network Analyzer 7.5 Released
New Features:
- Powerful TCP flow analysis for application performance optimization.
- Add ICQ monitor to analyze and log ICQ activities.
- Support RADIUS protocol analysis.
- Intuitive TCP transaction sequence diagram.
- Enhanced user interface & performance.
Improvements:
- The layout of Tab view has been optimized, and the computer resource usage is reduced significantly.
Bugs Fixed:
- The log view statistics are inaccurrately retrieved and displayed sometimes.
- Occasionally, the program keeps reactivating after a couple of days running.
- Reports can not dispaly properly sometimes.
- Bugs in ICMPv4 module.
- when a project file is replayed, the size of cscproj project file can be automatically changed.
- Random failure to export a report to PDF.
March 15, 2011-Capsa Network Analyzer 7.4 Released
New Features:
- Complete support for wireless traffic capture and analysis from all 802.11 a/b/g/n networks.
- Decryption of WEP/WPA/WPA2 protected packets.
Improvements:
- Redesigned Start Page layout.
- Optimized network profile settings that a capture can be started without a network profile.
- New icons for network tools on the Ribbon.
- Prompt of wireless disconnection when clicking the start button to start a wireless analysis.
- A replay bug fixed that a certain type of packets cannot be loaded.
October 20, 2010 - Capsa Network Analyzer 7.3.1
New Features & Improvements:
- Add Security Analysis Profile to analyze DoS attack, ARP attack and worm activities, etc.
- Add tab show/hide management panel for the main view.
- Add Data Storage on the Start Page to configure packet and log save settings.
- Add Report Logo preview in Report Settings.
- Add New Packet Storage and Log File Save icon on the Ribbon.
- Renamed Packet Buffer property page in the Analysis Profile Options to Packet Display Buffer, and the Packet Storage was removed from this page.
- Redesigned Log Settings property page in the Analysis Profile Options, and add new Export Log Settings to enable/disable log auto saving.
Bug fixed:
- Reactivation required when switching to other user accounts.
- Customize Protocol function may not apply.
- NetRay2.0 and Windows Sniffer (*.cap) packet files replaying incompatible.
June 17, 2010 - Capsa 7.2.1 Newly Released
New Features & Improvements:
- Support MSN, Yahoo Messenger monitoring.
- Support saving email content to hard disk.
- Support opening project file from Capsa 6.9.
- Display connection number of each node in the Matrix tab.
Bug fixed:
- The IP address range and mask condition of filter may not work.
- Cannot change 0 to another number in Analysis Profile Options.
- No separate check for Windows version of 32/64 bits before network adapter driver registry.
- Too much time to initiate a project.
- Wrong Delta Time in Packet tab.
Mar 4, 2010 - Capsa 7.1.2 Newly Released
New Features:
- Add Duplicate function for Network Profiles and Analysis Profiles in Start Page.
Improvements:
- New Start Page makes it easy to use.
- Add Local Engine Setting build in System Menu.
- Editing function of Network Profile and Analysis Profile moved to context menu.
- Format and Report setting page moved from "System Options" dialog to "Local Engine Setting" dialog.
Bug fixed:
- Cannot add new network group in Network Profile when auto network config detection failed.
Feb 1, 2010 - Colasoft Capsa 7.1
New Features:
- New interface style.
- New global dash board.
- New Diagnose view provides overview of related hosts list. Rapidly pinpoint problem hosts.
- Add Network Profile. It is a series of settings for different network environment, which including Network Group, Name Table, Alarm and Network Bandwidth setting.
- Add new analysis solutions. Include Global Analysis, Large Traffic Analysis and various frequently-used protocols analysis.
- Add online real-time alerts.
- Add new time sequence diagram for TCP conversation. Show both SYN and ACK response of TCP connection.
- Real-time analysis. Set adapters as source of data collection, which provide an intuitive display of traffic.
- Replay analysis. Set archive packet files as source of second time analysis. Support various replay speeds and provide retrospective analysis of historical issues.
- Support customized protocols for Ethernet II, IP, TCP, UDP.
- Support customized graphs.
- Support customized report and export as PDF.
- Enhanced packet filters.
July 1, 2009 - Colasoft Capsa 6.9 R2
New Features:
- Support Windows 7 32bit and 64bit Edition.
- Packet Player: Support replay multiple packet files simultaneously.
- Globally added two new options: alias(or hostname) and address can be displayed simultaneously.
- There is a new option in the global Option settings users can enable to prevent hibernation when capturing.
- New protocol ISL and FCoE can be recognized now.
- Decoders for ISL, FCoE protocols.
- Support Windows Server 2008 32bit and 64bit Edition.
Improvements:
- A online help section activated in Start Page below Quick Link.
- The Loopback won't be shown in the NIC test wizard.
Bug fixed:
- A wrong value has been displayed in the decode area for IP Fragment Offset.
- Users login as other windows ID will have to reactivate Capsa each time.
Oct 16, 2008 - Colasoft Capsa 6.9
New Features:
- Globally added two new option: Show Physical address as & Show IP address as.
- A new option added to prevent hibernation when capturing.
- Support decoding ISL, FCoE
Improvements:
- A online help section activated in Start Page below Quick Link.
- The Loopback won't be shown in the NIC test wizard.
Bug fixed:
- A wrong value has been displayed in the decode area for IP Fragment Offset.
July 04, 2008 - Colasoft Capsa 6.8
New Features:
- New Option for "Auto save packet file" in General Settings to specify the length of each packet to be saved.
- New GEO column in Endpoint View.
- New dock window for "Online Resources".
- New protocols decoder supported: Bittorrent, Emule, MSSQL, TNS.
Improvements:
- Updated the lib for National IP Address information.
- Improved the DNS analysis modules.
Bug fixed:
- When the program is not running, openning unsupported packet file by double click may cause incorrect value under count value in Summary View and Diagnosis view.
February 21, 2008 - Colasoft Capsa 6.7
New Features:
- 110 new protocols supported, including Time, Nameserver, Tacacs, Xns-time, JE, Discard, Systat, Qotd, MSP, Daytime, Msg-auth, Auditd, Ni-ftp, MPM, MPM-snd, Re-mail-ck, La-maint, XNS-ch, XNS-auth, XNS-mail, Tacacs-ds, Mit-ml-dev, CTF, NPP, DCP, Supdup, Swift-rvf, Tacnews, Mcidas, Pwdgen, Cisco-fna, Cisco-tna, Cisco-sys, Statsrv, Emfis-data, Emfis-cntl, GGP, HMP, PRM, RDP, IRTP, NETBLT, DCCP, IDPR, DDP, SDRP, IDRP, DSR, NARP, TLSP, PVP, SMP, PTP, CRTP, CRUDP, PIPE, FC, SPS, SNP, ISO-TP4, SKIP, CFTP, EIGRP Hello, EIGRP Query, EIGRP Reply, EIGRP Update, Login, Who, Yahoo Messenger, X-Window, ISMP, UMA, ISO-TP0, ISO-IP, BFTP, SGMP, SGMP-traps, NAMP, Send, RIS, MPP, CDC, Http-mgmt, PIP, Rtsps, Pdap, NSRMP, RSVP_tunnel, IBM-app, SNPP, RCP, NMSP, IDFP, SCC Security, Submission, Password-chg, SMIP, XDAS, CFS, RAMP, ACNET, Sflow, CRIP, TRIP, Mnet-discovery, Rwhois, SCCP, Citrix ICA, Rexec, Biff, RTP with VLC.
- Support decoding GGP, ISMP, IGRP, EIGRP, CDP, CGMP.
Bug fixed:
- DHCP decoder may cause program hang when decoding certain DHCP packets.
- On Windows x64 platform, cannot start capture due to packet buffer size validation failure if available physical system memory larger than 2GB.
November 5, 2007 - Colasoft Capsa 6.6
New Features:
- Support Windows Vista 64-bit Edition;
- 15 new protocols supported: Tunnel, Echo, CMIP-Agent, CMIP-Man, SFTP, RAP, RLP, Radius, Radius-acct, Radius-dynauth, eMule, PPlive, SShell, Kerberos, Windows NLB.
Improvements:
- Port 4443 now recognized as AIM protocol.
Bug fixed:
- Packet distribution statistics dose not work when restart capturing after open an existing project file;
- The 1 byte packet value filter dose not work correctly with byte masks.
September 3, 2007 - Colasoft Capsa 6.5
New Features:
- Analysis of 4 IM protocols: MSN, Yahoo Messenger, AIM, and ICQ; real-time message display and record;
- User Wizard to test NIC and check installation and deployment.
Improvements:
- Alter Log file format from ANSI to UTF-8.
Bug fixed:
- Graph view: crash after multi-clicking on "compare mode";
- Report: blank "traffic" and "packet" under Top titles of Report under Windows 2000 + SP4 and Windows 2003 + SP1.
March 22, 2007 - Colasoft Capsa 6.4
New Features:
- Supports Windows Vista.
- Supports Windows XP 64-bit Edition and Windows Server 2003 64-bit Edition (AMD x64 Processor architectures).
Improvements:
- New protocol decoders: Gopher, ICP, SCTP, VRRP.
- Add "Custom Columns" toolbar button in the Endpoints, Protocols, Conversations, Packets and Logs view.
Bug fixed:
- Email analyzer: Incorrect email address extracted from certain MIME header.
- Demo version: Log buffer limitation should be 512KB rather than 512 bytes.
December 13, 2006 - Colasoft Capsa 6.3 build 1073
New Features:
- Packet Builder, constructing custom packets and sending them into the network.
- New analyzer setting page in Options.
Improvements:
- New protocol decoders: PPTP, RSVP, COPS, L2TP, LPD, ICMPv6, IPv6, MSN, QQ.
- Packet Player now supports burst mode and loop sending.
- Enhanced send packets in Capsa now supports burst mode and loop sending.
- Add 'Locate Explorer Node' toolbar button in all sub-views.
Bug fixed:
- Log view didn't refresh automatically.
- Selected columns didn't work when exporting list items to txt, csv or html files.
- No data in 'Decode' column when exporting packet list to txt, csv or html files.
- In project setting, the bandwidth value of adapter will become negative if enter a value large than 2147.
- Summary view didn't remember column status and width.
September 27, 2006 - Colasoft Capsa 6.2
New Features:
- Send packets
- Built-in tools: Packet Player, MAC Address Scanner and Ping Tool
- Customizable external tools
Improvements:
- New protocol decoders: IGMP, IPX, SPX, NCP, RIP v1, RIP v2, OSPF, SAP, HSRP
- New protocol identification: NetWare IPX, NetWare Link Services Protocol, NetWare RIP Reply, NetWare SAP
- Optimized packet protocol identification process, 200% faster
- Improved statistic counter updating efficiency, 100% faster
- Manual host name resolution now supports reviewing the results
- Improved TCP stream view updating method
Bug fixed:
- Some protocols field may displays incorrect value in decode column of packets list view
- Packet decode view couldn't restore protocol field selection correctly
- Error packet and lost packet counter data didn't reset to zero when clear project data
July 25, 2006 - Colasoft Capsa 6.1
- New Reports view displays the real time statistics reports of global or specific groups
- New display type combo box in the Protocols view
- New Decode column in the Packets view
- New Next Sequence Packet Number of the decoded packets in the Packets view
- New Bytes Send/Receive Ratio and Packets Send/Receive Ratio displayed in the Endpoints view when the number of packets exceed 10
- Enhanced protocol identification now supports loopback, SNMP Trap, SSDP, ICP, COPS, RTP, IP Fragment, GDP, HSRP, MPLS, XNS and AARP
- Enhanced MPLS packets decoding
- Enhanced import/export packets file in TCP DUMP(*.dmp) format
- Enhanced resolve host name manually in every views which displays the IP address
- Enhanced the size of chart samples
- Enhanced the details of ICMP decoding
April 25, 2006 - Colasoft Capsa 6.0
New Features
- New Expert Matrix view shows all communicating endpoints within your network
- New Conversations view now supports physical, IP, TCP and UDP conversation.
- New DNS analysis module provides DNS-specific diagnoses and DNS query log
- New protocol decoders Finger, TFTP, Telnet and SSH
- Enhanced protocol identification now supports RIP, RIPV1, RIPV2, RIPV3, RIPV4, QQ, BitTorrent
- Enhanced project explorer - Groups Internet address by its geographical location
- Enhanced project explorer - Displays the realtime status of each nodes
- Enhanced graphs view extensive use of GDI+ supports shading, antialiasing and highlighting
- Exporting chart now supports PNG and EMF format
- Passively resolve IP addresses instead of automatically resolve
- Importing packets file now supports EhterPeek v7, ArioPeek v9 and OmniPeek v9 format
January 20, 2006 - Colasoft Capsa 5.5
New Features
- Expert network diagnosis module
- Filter table to share packet filter across projects
- Graphic packet filter interface
- Auto save captured packets to one or more packet files
- Find items in the explorer windows and almost all list views
- Sub views in the endpoints view and protocols view displaying related packets
- Identifiable protocol: IGAP, RGMP and PPPoE
- Protocol decoder: NetBIOS, DHCP, BOOTP, SMB, CIFS, SMTP, POP3, FTP and PPPoE
- Project setting options: save setting as default, custom port, statistics settings
- Global options: keep recent file, disable smooth scrolling
- Import wizard with range options
- Export process window
- Hot keys in the packets view
- Warning notice for project setting
- Import/export feature in the name table
- Layout options for protocol filter
August 26, 2005 - Colasoft Capsa 5.0
New Features
- New statistic views
- New graphs view (unique to enterprise edition)
- New statistic reports (unique to enterprise edition)
- Preview and print
- More supported network protocols
- New command line parameters
- Enhanced name table
- Summary statistics snapshots (unique to enterprise edition)
- New packet summary
- Enhanced log views and log files
- Enhanced packet filter
- Locate explorer nodes
- Multiple adapters in a project (unique to enterprise edition)
- Enhanced advanced analyzers
- Local host TDI loopback traffic (unique to enterprise edition)
- New related packets
- Enhanced project explorer
- New project status
- New network profile (unique to enterprise edition)
January 28, 2005 - Colasoft Capsa 4.06
- New: Resolve Host Name in Scope Explorer View, Node List View and IP List View
- New: Change Host Name in Scope Explorer View, Node List View and IP List View
- New: Product activation system
- New: Separately store web/transaction log in different files by time
- New: Support the conversion between ASCII and EBCDIC in TCP Stream View, Packet Decode View, Packet Hex View
- New: Predefined web accesses filters
- New: Optional peer nodes creating in Scope Explorer and Nodes List View
- Other miscellaneous bugs fixed
November 2, 2004 - Colasoft Capsa 4.05
- Improved Web access log, Content-Length is recordable now
- New project options for long-term traffic analysis
- Supports multi-subnet Intranet configuration, subnet address/mask customable
Bug fixed:
- the value of certain columns always return zero when exporting packet data
- Capsa didn't open project files via DDE
- Capsa stopped to capture network packets if reset a network adapter connection
- Miscellaneous improvements to online help
- Other miscellaneous bugs fixed
December 12, 2003 - Colasoft Capsa 4.0
What's New:
- New web access analysis module
- New transaction analysis module
- New TCP connection stream view
- New UDP session analysis
- High resolution timestamp (millisecond)
- Dynamic update of packets view
- More packets buffer options including ring buffer
- Automatically save projects
- Font and color customization in all views
- New layout of project setting dialog
- Improved capture filter settings
- New project summary view
- New filter settings for email, web access and transaction analysis module
- Improved hostname resolve method
- Add port name display options
- Custom port options
- New data exporting wizard
- New protocol driver supports Windows 2003 Server
April 25, 2003 - Colasoft Capsa 3.0
What's New:
- New connection view
- New wireless adapter support
- New Terminal server support
- New multi monitor support
- New higher-performance packet capture driver
- New column sorting support
- Improved network adapter enumeration
- Improved user interface
- Installation improvements
- Fixed memory leaks in packet capture driver
- Other miscellaneous bugs fix and improvements