TCP Reconstruction

Colasoft Capsa can reconstruct TCP conversations. The captured TCP conversations are listed in the Conversations view, to see the reconstructed contents, you should first select an item from the conversation list, then push the Stream sub-view tab at the lower section of the display, or double click the selected conversation to open the Conversation Details window, where you can see more conversation details, including streams and logs.

When a TCP stream is in plain text format, its contents are readable in the Stream view. Below is some example stream of a HTTP conversation.

To view a HTTP conversation in its original format, select a HTTP conversation from the Packets sub-view. All logged HTTP requests are presented in this sub-view, check to Stream sub-view or double click a URL to open it. A HTTP conversation may contain numbers of URLs, some of them can not be opened, e.g. the URLs ended with .css and .js. For more information, please see "Logs - HTTP requests".

Back

© 2008 Colasoft Co., Ltd. All rights reserved.