|
Using the Program |
|
|
The program interface consists of three panes. Captured packets are organized and showed on the left-top pane based on type, source and destination addresses, and connections. You can also add "workspace" to display packets that fit special criteria, such as containing a word, matching a user-defined rule, and/or matching time, size, etc (see the section of "Program Options"). The left-bottom pane and the right pane displays decoded data or statistics data. To start capturing packets, select a network adapter from the drop-down list on the toolbar, and click on the Start Capture button or select Edit -> Capture from the menu. To stop capturing packets, click on the Stop button on the toolbar or select Edit -> Stop from the menu.
File
| 1. | New - create a new document. |
| 2. | Open... - open an existing document. |
| 3. | Import... - import packet data from a "libpcap" file. |
| 4. | Save - save the active document. |
| 5. | Save as - save the active document with a new name |
| 6. | Exit - quit the application; prompt to save document |
Edit
| 1. | Capture - start capturing packets. |
| 2. | Stop - stop capturing packets. |
| 3. | Stop Alarm - stop alarm. |
| 4. | Copy - copy selected data into the clipboard. |
| 5. | Export Graph Data - write statistics data into a file. |
| 6. | Search... - search words or matches against a user defined rule. |
Options
| 1. | Status Bar - show or hide status bar. |
| 2. | Customize Workspace... - add or edit "workspace" to display packets that fit special criteria, such as containing a word, matching a user-defined rule, and/or matching time, size, etc. |
| 3. | Rules... - view and define rules for intrusion detection |
| 4. | Colors... - define colors for window background, decoded and raw data. |
| 5. | Data Manager... - define options for saving, filtering, displaying and logging data file, etc. |
Help
| 1. | About - display program information. |
| 2. | Help Topics - launches IPSoft helper. |