Packet Display Buffer

Capsa captures traffic on the network and stores the analyzed packets into the buffer. You will find all the packets in the buffer on the Packet tab. Therefore, the buffer size decides how many packets you see in the Packet tab. You can set the size of the dedicated buffer and configure to save the captured packets to packet files to disk.

Enable packet display buffer

This item checked, Capsa will build a dedicated buffer to save packets according the following settings. If you don't need to go deep to exam the packets, you can uncheck this item to disable the packet display buffer.

Buffer size

By default the packet buffer size is 16 MB. You can change the value, but you should take the size of your system memory into consideration. If you need to save all the packets in buffer, just click Export button in Packet Buffer group of the Ribbon or click the Export button in Packet tab.

You are recommended to set the packet buffer size less than half of your computer's physical memory. You could start at 64 MB then enlarge it if necessary.

When buffer is full

When the captured packets fill up the packet buffer you have specified, Capsa will do one of the followings:

• Discard oldest packets (circular buffering)
  It is recommended to discard the oldest packets when the packet buffer is full, the program will store new packets and keep the packet buffer up to date.
• Discard new packets after analyzing
  All new captured packets will be discarded after being analyzed and will not be saved to the packet buffer.
• Discard all old packets
  The program will empty the packet buffer and then append new packets to it.
• Stop capture or replay
  Stop the current capture or replay.

You should be aware that not all packets since the project initiated are saved in this display buffer. When the buffer is full, Capsa will operate as your settings on When buffer is full. If you don't want to miss any packets since you started the capture, please follow Packet Output to learn how to save all packets to your hard disk as packet files.