Transcript document

Network Analyzer
CS4500 Spring 2004
By Palantir:
Hong Jiang
Ryan Pratt
Raul Chiari
Overview: A Network Sniffer
Basically, Our Network Analyzer is a Network Sniffer.
So What is a Network Sniffer?
DEFINITION: Network sniffers
are diagnostic software
applications, often bundled with
hardware devices, that provide
protocol-level analysis of data
flowing through a network,
packet by packet. This
information can help
administrators monitor and
identify performance problems.
By Alan Joch at
http://www.computerworld.com/networki
ngtopics/networking/story/0,10801,6239
0,00.html
A picture of a Network Sniffer:
Overview: Our Network Analyzer
 A screenshot of our Network
Analyzer
Standard features:
• Our Network Analyzer can
capture data "off the wire" from
a live network connection, or
read from a capture file.
• Our Network Analyzer can
filter the capture request
before it capture any data.
• Our Network Analyzer can
show both a line chart and a
bar chart for protocol loading in
different time.
• Our Network Analyzer can
save the analyzed data to a file
as a snapshot of the network.
Features: Start capturing data
After you click Start, you
will see a window that
filters your capture
requests.
You can choose to load your
saved data from a file or you
can enter how many packets
you want to capture, start to
capture live data, and then
save the result to a file.
You can either load your
filter request or create one.
After you press “Start”, the
program will start to capture
live data.
Features: Showing data
Our Network Analyzer has the
ability to capture seven
protocols. They are Ethernet,
IP, ARP, TCP, UDP, ICMP, and
HTTP.
You are able to mark packets and
set time reference to packets. The
marked packet will has “MARK” in its
time column.
If you click on the title of each
columns, that column will be
sorted. Right now, the packets are
sorted by the packets number.
After you click on one of the
packets. You will be able to see a
tree structure that shows detail
data for that packet on the left
bottom of the GUI. On the right
side of the GUI, you can see the
data in both Hex and ASCII
format.
Features: Statistics
Our Network Analyzer has the
ability to show a line chart and
a bar chart. The Line chart
shows how many protocols are
captured in certain time
intervals. Bar chart shows how
many protocols are captured
overall.