Packet view

The Packet view displays captured packets and provides packet decoding information. This view includes three panes as follows:

Packet List pane

This pane lists captured packets by number and the list changes aong with the selection in the Node Explorer window. The packet list only displays the packets for the node selected in the Node Explorer window.

Toolbar

The following table lists and describes the items on the toolbar of this view.

Item Description
Saves selected packets or exports all packets in the packet list. You can save packets in any format selected from the Save as type drop-down list box.
Selects the previous packet in the list.
Selects the next packet in the list.
Shows the Packet List pane.
Shows the Field Decode pane.
Shows the Hex Decode pane.
Selects a layout style for Packet List pane, Field Decode pane, and Hex Decode pane.
Makes a packet filter based on the node or port number of selected packet. See Creating Filters for details.
Automatically scrolls down to display the newest packets. Note that this button will be invalid when an item on the packet list is selected.
Refreshes the packet list or sets display refresh interval by clicking the little triangle. If the interval is set to Manually Refresh, display will update only when the Refresh button is clicked.
Separates particular packet. See Display Filter for details.
Shows the number of packets in the list. The name changes along with the selection in the Node Explorer window.

Packet columns

By right-clicking the column header, you can specify which columns to show in the list. Choose Default to show default columns and choose More to open Display Column dialog box to set which columns to show and to set the position, the alignment and the width of the column. See Packet columns for details.

Pop-up menu

Right-click the packet list on this pane to get a pop-up menu with items as follows:

Item Description
Decode in New Window Opens a new window to show packet decode information; alternatively, you can double-click the packet.
Copy (Ctrl+C) Copies the selection in original format to the clipboard.
Copy Column Copies the selected column in original format to the clipboard.
Display Column Shows or hides columns or changes the position of columns.
Packet Summary Shows the packet summary.
  • Automatic: Shows the uppermost protocol summary
  • IP Summary: Shows the packet summary of IP protocols; if no IP protocols, show the uppermost protocol summary
  • TCP/UDP Summary: Shows the packet summary of TCP/UDP protocols; if no TCP/UDP protocols, show the uppermost protocol summary
Export Packets Saves selected packets or exports all packets in the packet list. You can save packets in any format selected from the Save as type drop-down list box.
Find Finds an item in the list.
Set Relative Time Makes your selected item as the reference time point and recalculates the relative time based on the selected item.
Make Filter Opens a new dialog box to make a packet filter based on the selection.
Resolve Address Resolves the host name of your selected item. With the resolved name, you can easily find the machine in your network.
Add to Name Table Add an alias for the selected node to the Name Table.
Make Graph Generates a new graph item in Graph tab based on the selected item.
Make Alarm Generates a new alarm item in Alarm Explorer window to alert you anomalies, based on the selected item.
Locate in Node Explorer Locates the current node in the Explorer.
Ping Invokes the build-in Ping Tool to ping the endpoints.
Send to Packet Builder Sends the selected packets to the build-in tool Packet Builder.
Select Relative Packets Highlights the related packets by source, destination, source and destination, conversation or protocol.
Hide Selected Packets Hides the highlighted packets.
Hide Unselected Packets Hides all the packets in the list except the highlighted ones.
Unhide All Packets Shows all hidden packets back to list.
Select All Selects all items in the list.
Notes Makes notes for selected packet.
Highlight Highlights the selected packet.
Refresh Refreshes the current list.

Field Decode pane

To view the decode information of the current packet, press the Decode View icon in the toolbar to open the pane, or double-click the packet to open the Packet Decode window.

The Filed Decode pane presents information based on the protocol used in packet transmission, click the minus or plus signs in the margin to collapse or expand the hierarchy of any header section.

The following table lists and describes all the items on the pop-up menu from right-clicking the Field Decode pane.

Item Description
Copy Copies the selection and puts it on the clipboard.
Copy Tree Copies the packet decode tree and puts it on the clipboard. Only available when a father node is selected.
Make Filter Opens a new dialog box to make a packet filter based on the selection.
Add to Name Table Add an alias for the selected node to the Name Table.
Expand All Expands all items of the display.
Collapse All Collapses all items of the display.
Select All Selects all rows in the Field Decode pane.
Refresh Refreshes the current pane.

Hex Decode pane

This pane interworks with the Field Decode pane, and when you select a portion of packet content in the Field Decode pane, Capsa highlights the selected portion and the corresponding Hex data and ASCII or EBCDIC data in this pane.

The following table lists and describes all the items on the pop-up menu from right-clicking the Hex Decode pane.

Item Description
Copy Copies the data and puts it on the clipboard.
Copy HEX Copies the HEX digits and puts it on the clipboard.
Copy Text Copies selected text in ASCII/EBCDIC decode area.
Display in ASCII Code Shows the decoded information as ASCII.
Display in EBCDIC Code Shows the decoded information as EBCDIC.
Select All Selects all Hex digits.
Refresh Refreshes the current pane.
Back