This tab presents original information of the conversation selected on the TCP Conversation view. A TCP conversation realized on the network may be sliced into multiple packets, and the packets are transmitted over the network out of order. Capsa organizes these packets in correct orders and reconstructs these packets into a TCP flow. The conversations using TCP protocol, including Web (HTTP), Email (SMTP/POP3), FTP and MSN and so on, can be reconstructed. The Data Flow tab appears as follows:
You may get unreadable symbols because some data are encrypted in transmission.
By default, the Data Flow tab presents the whole data flow between two nodes. You can distinguish the data of different nodes by colors, blue is for data from node 1 to node 2 and green is for data from node 2 to node 1.
The following table lists and describes the items on the toolbar:
| Item | Description |
 |
To choose flow direction for displaying the data flow:
|
 |
Limits the first number of packets in the conversation to display on the Data Flow tab. |
 |
Saves the data flow as a .txt file. |
 |
Refreshes the data flow. If the interval is set to Manually Refresh, display will update only when the Refresh button is clicked. |
 |
The number of packets displayed in the flow. |
Right-click the conversation list on this view to get a pop-up menu with items as follows:
| Item | Description |
| Copy | Copies the selected content to the clipboard. |
| Line Wrap | Auto-wraps. |
| Decoding | Chooses a decoding format to view the data flow. |
| Find | Calls out Find dialog box to search only on this tab. |
| Find Next | Finds next search result. |
| Select All | Selects all content of the data flow. |
| Refresh | Refreshes the data flow. |
| Back |