Node Explorer window

The Node Explorer window is functionally a display filter, by which you can view various conversation data of a node quickly and accurately. So, when you select different type of nodes in the Node Explorer window, the statistical views will show different tabs and the tabs will present different statistics.

Buttons

The Node Explorer window includes the following buttons:

: Adds specific node to name table (See Name Table for details).
: Creates filters using the specific node (See Creating Filters for details).
: Creates graphs using the specific node (See Creating Graphs for details).
: Creating alarms using the specific node (See Creating Alarms for details).

Nodes

The Node Explorer window includes the name of selected analysis profile which is called as the root node and three node explorers which are called as Protocol Explorer, Physical Explorer, and IP Explorer. Each explorer includes many nodes. The Protocol Explorer groups the protocol nodes by protocol layer. The Physical Explorer and IP Explorer group the address nodes by the node groups. You can group local MAC addresses and local IP addresses. See Node Group for details.

You can operate the nodes by keyboard: press UP arrow on the keyboard to select the upper node, Down to select the lower node, LEFT to collapse the node, and Right to expand the node.

In the Node Explorer window, both a single node and a node group can be called as a node.

For the protocols not identified by the program, they will be displayed as Other.
For wireless network adapter, some IP addresses will not be displayed due to encryption.

Protocol icon

There are three types of icons in front of each protocol node. The red icon indicates there is data transmission in five seconds, the green icon indicates there is data transmission in thirty seconds, and the grey icon indicates there is no data transmission in thirty seconds.

Traffic direction icon

You may have noticed the arrow icons in front of each node with different directions and colors. The upper arrow indicates packets transmitted to the node, the middle line indicates transmission inside the node, and the lower arrow indicates packets transmitted out from the node. Green indicates ongoing transmission and grey indicates completed transmission.

Address type icon

In front of arrow icons, there are icons indicating the address type of the node, and both indicating broadcast address, and both indicating multicast address, and indicating Internet address.

Internet address group

By default, Internet IP addresses are hierarchically grouped by countries or areas. To display the Internet IP addresses flat, click Node Group icon

on the Analysis tab of the Ribbons section and cancel the selection on Enable Country Group.

Back