Packet Capture launches a separate app
that captures ethernet network packets and stores them in a standard WinPcap
packet capture ".cap" file. While not a replacement for a
powerful tool like Wireshark, it does give you a quick glimpse
into the traffic going through your interfaces without the
overhead of a full packet analysis tool.
You can view the contents of the packets in the
built-in hex viewer or launch an external advanced tool like
Wireshark that can read
the capture file and provide better decoding of the packets. It
is pretty simple to use. After you launch it, press the Capture
button. When you are done capturing data, press the Stop button
and the display is filled with a list of packets. You can use
the built-in simple decoder or launch a more powerful packet
analysis tool. Saving the capture or a specific packet is fully
supported and you can reload a capture later for future
analysis.
Packet Capture Tool Requirements
This application works on Windows 8, 7, Vista, 2003, XP, 2000.
We use it with standard ethernet 10/100BaseT network interfaces.
Your interface must support 'promiscuous' mode. Wireless
802.11 interfaces
usually work if they are supported by Windows. Modems and
WAN (PPP/SLIP) interfaces are not supported on Windows 7/Vista due
to WinPcap limitations. This feature requires the WinPcap packet
driver which we install as part of the NetScanTools Pro package.
This Packet Capture Tool supports both IPv4 and IPv6.
Features
Captures all packets and provides basic decoding
of TCP, UDP,
ICMP, IGMP, and ARP packets. Decodes both IPv4 or IPv6.
Real time display of the arriving packet
count.
Time stamping of packet arrival, display
of source/destination IPs, protocol type.
Parses and shows port numbers, packet length, TTL, TCP sequence numbers and flags.
Input Filter by IP address, port number or
packet type (ICMP, TCP, UDP)
Post-capture display filtering by text found
in display.
Post-capture searching of the display list
of packets for text strings.
Post-capture searching of the actual packet
contents for text strings.
Save the packet capture file separately for
future reference.
Extraction and export of a single packet
to a separate packet capture file (.cap).
Load/import a previous session from a saved
Packet Viewer capture file.