Capsa Updates

New Features:

• Add global display filter function, users can set the global display filter in the analysis interface.
• Add host behavior analysis, analyze the network behavior of IP and services through statistical traffic data.
• Add filter expression session. Decrypted payload in TCP conversion, for details see Online help (F1).
• Users can directly set various items of analysis settings on the start page, and can customize the items to be set in the analysis settings.
• Add advanced filtering function for global display filter, users can write the relationship (and, or, not, and group) between each filter item through the advanced filtering function.
• Add judgment prompts for packet view. TCP Window Full (red), TCP ZeroWindow (red), and TCP Window Update (prompt).
• Add exporting pictures function to transaction sequence diagram in TCP transaction analysis.
• Add conversation TTL field for TCP conversation and UDP conversation.

Improvements:

• Improve the stuttering problem when switching views under large data volumes.
• Improve the memory usage during product startup, greatly reducing the memory usage during startup.
• Optimize the allocation and use of packets display cache, improve the utilization of system memory in the analysis process. Users can customize the maximum packets display cache size.
• Improve Colasoft Packet Builder tool, support batch editing and packets and support the creation of more packet templates.
• Improve online query function of threat intelligence.

New Features:

• Internet IP device identification feature is added.
• Replay analysis supports wireless packets decryption.
• Users can locate related conversations from the Diagnosis Details tab.

Improvements:

• Packets can be exported in libpcap-nanosecond type.
• Analysis Profile and Network Profile are merged to be Analysis Settings.
• Analysis settings are independent per project.
• Users can configure whether to stop analyzing when available memory is less than a specified threshold.
• Users can view traffic logs on lower panes.
• In DPI filter mode, conversation views support script-based display filters.
• Reconstructed files will be saved in one file folder every 1,000 conversations.
• Format-supported trace files can be replayed without file extension.

Bugs Fixed:

• Email analysis for some IMAP4 conversations may cause Capsa locked.
• HTTP logs cannot be exported automatically.
• VoIP analysis may cause crash.
• DPI filter with specific rules doesn't take effect.
• Copying or exporting the hex data on Hex view of data Flow tab may cause Capsa to crash.
• IP addresses may be grouped wrongly.
• Routing Loop and Physical Loop events of Diagnosis settings are displayed as unchecked even though they have been checked.

New Features:

• A full traffic decoding feature is provided.
• DPI filter is provided.
• Decoding script editor tool is provided.
• A Service view is added to provide service access statistics.
• TCP graph stream is added for TCP conversations.

Improvements:

• Add national flag to geolocation.
• The hex display of client and server data for TCP and UDP flow is colorized.
• Users can customize column width or set the column width to default by right-click or shortcut.
• Users can modify time display precision via Options -> Display Format -> Time precision.
• IP address location information can be obtained via a find function.
• The analysis for huge packets is optimized.
• The packets with incorrect IP header checksum will not be corrected.

New Features:

• Users can select which packets they want to replay according to their requirement
• Packet storage filters are provided
• Exporting the packets of HTTP conversation in TCP Conversation view is supported
• Advanced filter can be imported and exported

Improvements:

• The IP address library is updated
• The log view is sorted by packet timestamps
• Sorting conversations by time as default
• The function of packet compulsive decoding is optimized

New Features:

• Users can select which packets they want to replay according to their requirement
• Packet storage filters are provided
• Exporting the packets of HTTP conversation in TCP Conversation view is supported
• Advanced filter can be imported and exported

Improvements:

• The IP address library is updated
• The log view is sorted by packet timestamps
• Sorting conversations by time as default
• The function of packet compulsive decoding is optimized

New Features:

• IPv6 packet analysis is provided
• Endpoint analysis and conversation analysis based on IPv6 is provided
• Files transmitted over HTTP protocol can be reconstructed, including HTML files, images, CSS, JS, EXE, etc
• Files transmitted over FTP protocol can be reconstructed
• SSL certificates can be reconstructed
• RTP flow can be analyzed when signaling packets are not captured
• An SSL Log sub-view is added to the Log view.
• An X-Forwarded-For field is added to the HTTP Log view

Improvements:

• Capsa can remember the file path for last replay
• A "Path" column is added to the Replay tab to display the path of the packet file

Bugs Fixed:

• Sometimes, the event Duplicated Acknowledgement was misjudged

New Features:

• An Interaction Diagram column and a Transport Layer Max ACK Time column are added for TCP Conversation view
• A Payload column is added for TCP Conversation view and Packet view.
• Audio and video can be played for SIP VoIP calls based on following codecs: G.711/a, g.711/u, GSM, BV32, Speex, PCM, H.264 (unencrypted), H.263(unencrypted), Mp4v-es
• Audio and video can be played for H.323 VoIP calls based on following codecs: G.711/a, g.711/u, GSM, H.264(unencrypted), H.263 (unencrypted)

Improvements:

• VoIP analysis is improved to support both SIP and H.323 protocol
• MAC address library and IP address library have been updated
• The calculation for TCP conversation metrics has been updated
• Average bps, average utilization, and average pps are added for traffic statistics
• Packet timestamp supports nanosecond, and some statistics are accurate to nanosecond

Bugs Fixed:

• Capsa crashes when the Packet Decoding pane is minimized to zero
• The packet is identified as retransmission when the previous packet sequence number reaches the 32-bit integer limit
• Capsa sometimes hangs on the initializing page when starting a project
• Capsa sometimes crashes when saving the statistics on the Diagnosis view
• Network adapters occasionally cannot be detected on Windows 10

New Features:

• HTTPS packets can be decrypted with key files
• Application based traffic analysis and statistics are available
• An Application view and an Application Explorer are provided
• More than 1800 built-in applications are provided
• Custom applications are available
• A Base64 Codec is provided

Improvements:

• A Protocol column is added for the Port view
• A Dup Ack mark is added to the Summary column on the Packet view
• The display of top charts is optimized
• The display on HiDPI screen is optimized
• IP address conflict detection is optimized

Bugs Fixed:

• The Find box cannot be called out from the Node Explorer
• Packets cannot be located for a specific diagnosis event on the Diagnosis view

New Features:

• Conversation filter is provided to define filter rules for MAC/IP/TCP/UDP conversation
• Packets can be decoded as specified protocol
• Packets can be filtered based on time rule
• Enable batch address/port input for advanced capture filter
• A Time Sequence tab is added for DNS-based conversation
• The protocol PPP for POS can be recognized and decoded

Improvements:

• Name table file supports .csv format
• An option is added to enable/disable the automatic loading of packet files replayed last time

New Features:

• Network traffic can be analyzed based on local processes
• A Process view and a Process Explorer are provided

Improvements:

• bps calculation is optimized
• No "Limited Group" for Node Explorer
• View Display is optimized
• Conversation data display is optimized.
• IP address geographical information library is updated for Colasoft Ping Tool
• User interface display is optimized for Colasoft Ping Tool
• MAC address manufacturer information is updated for Colasoft MAC Scanner

Bugs Fixed:

• Chart cannot be saved sometimes for Colasoft Ping Tool

Improvements:

• The recognition of some protocols is more accurate

Bugs Fixed:

• The Windows 10 operating system logs off from time to time when starting Capsa
• Added name table cannot be auto-saved
• Packet files with capitalized extension cannot be replayed
• Log View settings in Analysis Profile cannot be auto-saved
• For wireless analysis, no packets are shown on the Packet view when a MAC address is selected in the Node Explorer

New Features:

• Support analyzing the traffic of 2-channel wireless AP.
• Support displaying decoded data in hex in Data Flow sub-view in TCP Conversation view and UDP Conversation view

Improvements:

• Optimize the display of Data Flow sub-view in TCP Conversation view and UDP Conversation view
• Support recognizing 1546 protocols and sub-protocols

New Features:

• Add online auto-update feature.
• Add conversation filter.
• Add signature recognization of DNS packets.

Improvements:

• Optimize the interface of TCP Flow Analysis.
• Optimize system architecture, upgrade from 32-bit to 64-bit version.
• A maximum of 100,000 analysis objects are supported in 64-bit version. Packet buffer size can be set as the total idle RAM of the system.
• Analysis performance is improved greatly.
• Add field sorting capability in the Log view.
• Support recognizing 1040 protocols and sub-protocols, support decoding 142 protocols.

Bugs Fixed:

• Fix the problem of command line calling error.

New Features:

• The third-generation Colasoft Traffic Recognition Engine (CSTRE) provides more accurate protocol and application recognition.
• Add IP fragment packet decoding capability.
• Add HTTPS stream reassembly decoding capability.
• Support auto-resolution of domain name and host name.
• Protocol decoding content can be exported.
• Add two diagnosis events: physical loop and routing loop.
• MAC/IP/TCP/UDP Conversation View can be located directly from Packet View.
• Add packet time shift function to Packet View.
• Support chunked encoding reassembly and gzip compression decoding in HTTPS stream reassembly content.
• Colorizing the packets for a conversation in MAC/IP/TCP/UDP Conversation View.
• Support running Capsa with command lines.
• 83 new protocols supported: NJACK,6LoWPAN,Adwin-Config,PEEKREMOTE,Etch,AppleMIDI,AR Drone,ACN,ARTNET,BSSGP,TUXEDO,BFD Control,Bitcoin,BT DHT,XCSL,Auto_RP,CWLCCP,Clique-rm,CTDB,CIGI,DPLAY,DCC,DVB-S2,E100,DCP(ETSI),XMCP,GIOP,GPRS,HiSLIP,IEC MMS,IEEE_1588,iFCP,Interlink,ICEP,Kismet,LANforge,LBMR,LAPD,PKTGEN,LBT-RM,LBT-RU,MAC-LTE,MSRP,MS SGSN LLC,Mojito,NORM,NBD,OSC,openflow,PVFS,Pathport,PDCP-LTE,IEEE_1588_PCSP,PANA,RLC,RTPS,RedbackLI,RLM,RMCP,RPCAP,RELOAD,RLC-LTE,SERCOSIII,SAP 822,SPRT,H1,SKTP,Spice,StarTeam,SDCP,Teredo,UDT,UCP,UMA_M,MIOP,BT-uTP,VNC,WOL,waveagent,MQ,WLCCP,YMSG and ZIOP.

Improvements:

• Address Resolution Options is added.
• Network Profile is enabled by default when creating a project.

Bugs Fixed:

• TCP data reassembly display is not accurate.
• Crash caused by repeated clicks of Replay button after packet replay storage space is full.

New Features:

• Adds VoIP analysis, including VoIP analysis profile, call statistics, VoIP dashboard, diagnosis, logs, reports, and VoIP Explorer.
• Domain based statistics is available.
• Advanced display filter for packets.
• Port based statistics is available
• IMAP4 based emails can be analyzed.
• Windows Server 2012 support (except for Colasoft Packet Builder).

Improvements:

• The Packet tab for the TCP Conversation view is optimized to be identical to the Packet view.
• The color scheme for TCP Transaction Summary Pie Chart is improved.
• Dashboard is optimized to provide more default graphs.
• Several built-in reports are added to the Report view.
• Default Packet Buffer is increased to 128 MB.

New Features:

• Adds the identification and decoding of the protocols: SIP, SDP, MEGACO/H.248, MGCP, Q931, SAP, H.225, RMI, Oracle, MMS, GOOSE, SMV, and GMRP.
• Alarm notification now by both audio and email.
• Added Custom Reporting capability for individual nodes within the Node Explorer.

Bug Fixed:

• The Analysis Profile Settings dialog box could not be closed when a scheduled project was running.
• Restored the manufacturer information for the Colasoft MAC Scanner.
• Resolved Checksum Error in the Summary column on the Packet view when decoding UDP protocol under IPv6.
• Eliminated program crash during packet file replay.
• No packets were captured when a capture using multiple NICs was stopped and restarted again.

New Features:

• You can now schedule task to automatically start a new analysis project at specified time.
• Configurations of the program can be exported and imported. The configurations include the settings of network profile, analysis profile, dashboard, matrix and report.
• Display filters are provided for isolating and viewing particular items.
• You can now add new report with user-defined name and optional statistic items.
• Packets can be highlighted and noted.

Improvements:

• Logs can be automatically saved in *.csv format.
• Capsa can now identify encryption type of AP automatically.
• An MAC address column is added to the Log tab.
• Settings for analysis profile have been optimized.
• Local engine settings are merged into Options on the Menu button.
• Capsa can now decode Tunnel IP in IP protocol.
• The analysis profile, Protocol Analysis, is removed.

Bug Fixed:

• The layout of columns, including column arrangement and column width, cannot be memorized.
• The Find dialog box cannot remember the search content typed last time.

New Features:

• Powerful TCP flow analysis for application performance optimization.
• Add ICQ monitor to analyze and log ICQ activities.
• Support RADIUS protocol analysis.
• Intuitive TCP transaction sequence diagram.
• Enhanced user interface & performance.

Improvements:

• The layout of Tab view has been optimized, and the computer resource usage is reduced significantly.

Bugs Fixed:

• The log view statistics are inaccurrately retrieved and displayed sometimes.
• Occasionally, the program keeps reactivating after a couple of days running.
• Reports can not dispaly properly sometimes.
• Bugs in ICMPv4 module.
• when a project file is replayed, the size of cscproj project file can be automatically changed.
• Random failure to export a report to PDF.

New Features:

• Complete support for wireless traffic capture and analysis from all 802.11 a/b/g/n networks.
• Decryption of WEP/WPA/WPA2 protected packets.

Improvements:

• Redesigned Start Page layout.
• Optimized network profile settings that a capture can be started without a network profile.
• New icons for network tools on the Ribbon.
• Prompt of wireless disconnection when clicking the start button to start a wireless analysis.
• A replay bug fixed that a certain type of packets cannot be loaded.

New Features & Improvements:

• Add Security Analysis Profile to analyze DoS attack, ARP attack and worm activities, etc.
• Add tab show/hide management panel for the main view.
• Add Data Storage on the Start Page to configure packet and log save settings.
• Add Report Logo preview in Report Settings.
• Add New Packet Storage and Log File Save icon on the Ribbon.
• Renamed Packet Buffer property page in the Analysis Profile Options to Packet Display Buffer, and the Packet Storage was removed from this page.
• Redesigned Log Settings property page in the Analysis Profile Options, and add new Export Log Settings to enable/disable log auto saving.

Bug fixed:

• Reactivation required when switching to other user accounts.
• Customize Protocol function may not apply.
• NetRay2.0 and Windows Sniffer (*.cap) packet files replaying incompatible.

New Features & Improvements:

• Support MSN, Yahoo Messenger monitoring.
• Support saving email content to hard disk.
• Support opening project file from Capsa 6.9.
• Display connection number of each node in the Matrix tab.

Bug fixed:

• The IP address range and mask condition of filter may not work.
• Cannot change 0 to another number in Analysis Profile Options.
• No separate check for Windows version of 32/64 bits before network adapter driver registry.
• Too much time to initiate a project.
• Wrong Delta Time in Packet tab.

New Features:

• Add Duplicate function for Network Profiles and Analysis Profiles in Start Page.

Improvements:

• New Start Page makes it easy to use.
• Add Local Engine Setting build in System Menu.
• Editing function of Network Profile and Analysis Profile moved to context menu.
• Format and Report setting page moved from "System Options" dialog to "Local Engine Setting" dialog.

Bug fixed:

• Cannot add new network group in Network Profile when auto network config detection failed.

New Features:

• New interface style.
• New global dash board.
• New Diagnose view provides overview of related hosts list. Rapidly pinpoint problem hosts.
• Add Network Profile. It is a series of settings for different network environment, which including Network Group, Name Table, Alarm and Network Bandwidth setting.
• Add new analysis solutions. Include Global Analysis, Large Traffic Analysis and various frequently-used protocols analysis.
• Add online real-time alerts.
• Add new time sequence diagram for TCP conversation. Show both SYN and ACK response of TCP connection.
• Real-time analysis. Set adapters as source of data collection, which provide an intuitive display of traffic.
• Replay analysis. Set archive packet files as source of second time analysis. Support various replay speeds and provide retrospective analysis of historical issues.
• Support customized protocols for Ethernet II, IP, TCP, UDP.
• Support customized graphs.
• Support customized report and export as PDF.
• Enhanced packet filters.

New Features:

• Support Windows 7 32bit and 64bit Edition.
• Packet Player: Support replay multiple packet files simultaneously.
• Globally added two new options: alias(or hostname) and address can be displayed simultaneously.
• There is a new option in the global Option settings users can enable to prevent hibernation when capturing.
• New protocol ISL and FCoE can be recognized now.
• Decoders for ISL, FCoE protocols.
• Support Windows Server 2008 32bit and 64bit Edition.

Improvements:

• A online help section activated in Start Page below Quick Link.
• The Loopback won't be shown in the NIC test wizard.

Bug fixed:

• A wrong value has been displayed in the decode area for IP Fragment Offset.
• Users login as other windows ID will have to reactivate Capsa each time.

New Features:

• Globally added two new option: Show Physical address as & Show IP address as.
• A new option added to prevent hibernation when capturing.
• Support decoding ISL, FCoE

Improvements:

• A online help section activated in Start Page below Quick Link.
• The Loopback won't be shown in the NIC test wizard.

Bug fixed:

• A wrong value has been displayed in the decode area for IP Fragment Offset.

New Features:

• New Option for "Auto save packet file" in General Settings to specify the length of each packet to be saved.
• New GEO column in Endpoint View.
• New dock window for "Online Resources".
• New protocols decoder supported: Bittorrent, Emule, MSSQL, TNS.

Improvements:

• Updated the lib for National IP Address information.
• Improved the DNS analysis modules.

Bug fixed:

• When the program is not running, openning unsupported packet file by double click may cause incorrect value under count value in Summary View and Diagnosis view.

New Features:

• 110 new protocols supported, including Time, Nameserver, Tacacs, Xns-time, JE, Discard, Systat, Qotd, MSP, Daytime, Msg-auth, Auditd, Ni-ftp, MPM, MPM-snd, Re-mail-ck, La-maint, XNS-ch, XNS-auth, XNS-mail, Tacacs-ds, Mit-ml-dev, CTF, NPP, DCP, Supdup, Swift-rvf, Tacnews, Mcidas, Pwdgen, Cisco-fna, Cisco-tna, Cisco-sys, Statsrv, Emfis-data, Emfis-cntl, GGP, HMP, PRM, RDP, IRTP, NETBLT, DCCP, IDPR, DDP, SDRP, IDRP, DSR, NARP, TLSP, PVP, SMP, PTP, CRTP, CRUDP, PIPE, FC, SPS, SNP, ISO-TP4, SKIP, CFTP, EIGRP Hello, EIGRP Query, EIGRP Reply, EIGRP Update, Login, Who, Yahoo Messenger, X-Window, ISMP, UMA, ISO-TP0, ISO-IP, BFTP, SGMP, SGMP-traps, NAMP, Send, RIS, MPP, CDC, Http-mgmt, PIP, Rtsps, Pdap, NSRMP, RSVP_tunnel, IBM-app, SNPP, RCP, NMSP, IDFP, SCC Security, Submission, Password-chg, SMIP, XDAS, CFS, RAMP, ACNET, Sflow, CRIP, TRIP, Mnet-discovery, Rwhois, SCCP, Citrix ICA, Rexec, Biff, RTP with VLC.
• Support decoding GGP, ISMP, IGRP, EIGRP, CDP, CGMP.

Bug fixed:

• DHCP decoder may cause program hang when decoding certain DHCP packets.
• On Windows x64 platform, cannot start capture due to packet buffer size validation failure if available physical system memory larger than 2GB.

New Features:

• Support Windows Vista 64-bit Edition;
• 15 new protocols supported: Tunnel, Echo, CMIP-Agent, CMIP-Man, SFTP, RAP, RLP, Radius, Radius-acct, Radius-dynauth, eMule, PPlive, SShell, Kerberos, Windows NLB.

Improvements:

• Port 4443 now recognized as AIM protocol.

Bug fixed:

• Packet distribution statistics dose not work when restart capturing after open an existing project file;
• The 1 byte packet value filter dose not work correctly with byte masks.

New Features:

• Analysis of 4 IM protocols: MSN, Yahoo Messenger, AIM, and ICQ; real-time message display and record;
• User Wizard to test NIC and check installation and deployment.

Improvements:

• Alter Log file format from ANSI to UTF-8.

Bug fixed:

• Graph view: crash after multi-clicking on "compare mode";
• Report: blank "traffic" and "packet" under Top titles of Report under Windows 2000 + SP4 and Windows 2003 + SP1.

New Features:

• Supports Windows Vista.
• Supports Windows XP 64-bit Edition and Windows Server 2003 64-bit Edition (AMD x64 Processor architectures).

Improvements:

• New protocol decoders: Gopher, ICP, SCTP, VRRP.
• Add "Custom Columns" toolbar button in the Endpoints, Protocols, Conversations, Packets and Logs view.

Bug fixed:

• Email analyzer: Incorrect email address extracted from certain MIME header.
• Demo version: Log buffer limitation should be 512KB rather than 512 bytes.

New Features:

• Packet Builder, constructing custom packets and sending them into the network.
• New analyzer setting page in Options.

Improvements:

• New protocol decoders: PPTP, RSVP, COPS, L2TP, LPD, ICMPv6, IPv6, MSN, QQ.
• Packet Player now supports burst mode and loop sending.
• Enhanced send packets in Capsa now supports burst mode and loop sending.
• Add 'Locate Explorer Node' toolbar button in all sub-views.

Bug fixed:

• Log view didn't refresh automatically.
• Selected columns didn't work when exporting list items to txt, csv or html files.
• No data in 'Decode' column when exporting packet list to txt, csv or html files.
• In project setting, the bandwidth value of adapter will become negative if enter a value large than 2147.
• Summary view didn't remember column status and width.

New Features:

• Send packets
• Built-in tools: Packet Player, MAC Address Scanner and Ping Tool
• Customizable external tools

Improvements:

• New protocol decoders: IGMP, IPX, SPX, NCP, RIP v1, RIP v2, OSPF, SAP, HSRP
• New protocol identification: NetWare IPX, NetWare Link Services Protocol, NetWare RIP Reply, NetWare SAP
• Optimized packet protocol identification process, 200% faster
• Improved statistic counter updating efficiency, 100% faster
• Manual host name resolution now supports reviewing the results
• Improved TCP stream view updating method

Bug fixed:

• Some protocols field may displays incorrect value in decode column of packets list view
• Packet decode view couldn't restore protocol field selection correctly
• Error packet and lost packet counter data didn't reset to zero when clear project data

• New Reports view displays the real time statistics reports of global or specific groups
• New display type combo box in the Protocols view
• New Decode column in the Packets view
• New Next Sequence Packet Number of the decoded packets in the Packets view
• New Bytes Send/Receive Ratio and Packets Send/Receive Ratio displayed in the Endpoints view when the number of packets exceed 10
• Enhanced protocol identification now supports loopback, SNMP Trap, SSDP, ICP, COPS, RTP, IP Fragment, GDP, HSRP, MPLS, XNS and AARP
• Enhanced MPLS packets decoding
• Enhanced import/export packets file in TCP DUMP(*.dmp) format
• Enhanced resolve host name manually in every views which displays the IP address
• Enhanced the size of chart samples
• Enhanced the details of ICMP decoding

New Features

• New Expert Matrix view shows all communicating endpoints within your network
• New Conversations view now supports physical, IP, TCP and UDP conversation.
• New DNS analysis module provides DNS-specific diagnoses and DNS query log
• New protocol decoders Finger, TFTP, Telnet and SSH
• Enhanced protocol identification now supports RIP, RIPV1, RIPV2, RIPV3, RIPV4, QQ, BitTorrent
• Enhanced project explorer - Groups Internet address by its geographical location
• Enhanced project explorer - Displays the realtime status of each nodes
• Enhanced graphs view extensive use of GDI+ supports shading, antialiasing and highlighting
• Exporting chart now supports PNG and EMF format
• Passively resolve IP addresses instead of automatically resolve
• Importing packets file now supports EhterPeek v7, ArioPeek v9 and OmniPeek v9 format

New Features

• Expert network diagnosis module
• Filter table to share packet filter across projects
• Graphic packet filter interface
• Auto save captured packets to one or more packet files
• Find items in the explorer windows and almost all list views
• Sub views in the endpoints view and protocols view displaying related packets
• Identifiable protocol: IGAP, RGMP and PPPoE
• Protocol decoder: NetBIOS, DHCP, BOOTP, SMB, CIFS, SMTP, POP3, FTP and PPPoE
• Project setting options: save setting as default, custom port, statistics settings
• Global options: keep recent file, disable smooth scrolling
• Import wizard with range options
• Export process window
• Hot keys in the packets view
• Warning notice for project setting
• Import/export feature in the name table
• Layout options for protocol filter

New Features

• New statistic views
• New graphs view (unique to enterprise edition)
• New statistic reports (unique to enterprise edition)
• Preview and print
• More supported network protocols
• New command line parameters
• Enhanced name table
• Summary statistics snapshots (unique to enterprise edition)
• New packet summary
• Enhanced log views and log files
• Enhanced packet filter
• Locate explorer nodes
• Multiple adapters in a project (unique to enterprise edition)
• Enhanced advanced analyzers
• Local host TDI loopback traffic (unique to enterprise edition)
• New related packets
• Enhanced project explorer
• New project status
• New network profile (unique to enterprise edition)

• New: Resolve Host Name in Scope Explorer View, Node List View and IP List View
• New: Change Host Name in Scope Explorer View, Node List View and IP List View
• New: Product activation system
• New: Separately store web/transaction log in different files by time
• New: Support the conversion between ASCII and EBCDIC in TCP Stream View, Packet Decode View, Packet Hex View
• New: Predefined web accesses filters
• New: Optional peer nodes creating in Scope Explorer and Nodes List View
• Other miscellaneous bugs fixed

• Improved Web access log, Content-Length is recordable now
• New project options for long-term traffic analysis
• Supports multi-subnet Intranet configuration, subnet address/mask customable

Bug fixed:

• the value of certain columns always return zero when exporting packet data
• Capsa didn't open project files via DDE
• Capsa stopped to capture network packets if reset a network adapter connection
• Miscellaneous improvements to online help
• Other miscellaneous bugs fixed

What's New:

• New web access analysis module
• New transaction analysis module
• New TCP connection stream view
• New UDP session analysis
• High resolution timestamp (millisecond)
• Dynamic update of packets view
• More packets buffer options including ring buffer
• Automatically save projects
• Font and color customization in all views
• New layout of project setting dialog
• Improved capture filter settings
• New project summary view
• New filter settings for email, web access and transaction analysis module
• Improved hostname resolve method
• Add port name display options
• Custom port options
• New data exporting wizard
• New protocol driver supports Windows 2003 Server

What's New:

• New connection view
• New wireless adapter support
• New Terminal server support
• New multi monitor support
• New higher-performance packet capture driver
• New column sorting support
• Improved network adapter enumeration
• Improved user interface
• Installation improvements
• Fixed memory leaks in packet capture driver
• Other miscellaneous bugs fix and improvements