Getting Started

Introduction Registration Capture PCAPs Anonymize PCAPs Upload Feature comparision

PCAP Browser

Overview Search Mass Actions Basic Information Connection view Comments Tags DNS View Indices Capture Point Visualization

Indexing

Defaut Indexer Reindexing Settings

Analyze

Overview Packet List Filter Bar Decode Hex View Explain Field Edit PCAP Graph View Statistics Decryption

Settings

Overview Profile Indexer Roles Tags

Account Management

Profile Deletion

Help

Application errors

Encyclopedia

Initial Round Trip Time Server Name Indication Packet Slicing PCAPng

Capture Point Visualization

Packet Safari shows you where capture was taken in your network.

Collections

Packet Safari connection view gives you many benefits:

  • ⚡️ RTT based. Based on the iRTT of the handshake the capture point is determined.

  • ⚡️ TTL based. The TTL of packets from both directions also is accounted for.

  • ⚡️ MAC address labelling. Devices are labelled in the diagram based on the trace file.

  • ⚡️ IP address labelling. Devices are labelled in the diagram based on the trace file.

  • ⚡️ Device type detection. The engine tries to determine the device type seen in the trace.

iRTT Graph

The iRTT (initial round trip time) graph visualizes the initial round trip time between the two endpoints.

iRTT Graph

On this page