Javvin Packet Analyzer User's Manual


Overview

Professional and enterprise

Version and upgrade

Install and Uninstall

Installation Environment

Get Started to Use

Create a Project and Capture Traffic

Select Capture Sources

Use Menu bar

Use Toolbar

Use Context menus

Use Start Page

Use Dock windows

Understand and Use Tab views

Choose System Options

Restart Capture and Do Automatic Capture

Project settings

HManage Data

Understand Statistics

Manage Filters

Use Command Line to Operate the Analyzer

Do TCP session Reconstruction Using Packet Analyzer

Set and Use Name Table

Manage Logs

Decode Packets

Customize User Interface

Optimize the Performance of the Analyzer


free download Free to try

Order Packet Analyzer Buy Now


Decoding Packets

Javvin Packet Analyzer analyzes and decodes packets and displays detailed packet information in the Packets tab view and its sub-views. Packet decode information lets you look through the packets themselves, which is very useful in troubleshooting your network to track down security vulnerability or learning more knowledge about protocols and network services.

The following sections introduce the Javvin Packet Analyzer decoders, describe how to read a packet's information and decode.

Packet decoders

The packet decoders are the essential engines to decode packets. All available decoders are enabled by default, but you can close those you don't need to increase the program performance.

To open the Options - Decoder page, select Options... from the Tools menu and then press the Decoder tab. All decoders are listed by protocol and marked with a tick indicating they are enabled, use the check box before every decoder to disable it.

Decoding Packets 1

Note: The decoders are applicable to global packet decoding. When you disable a decoder in the Decoders dialog, Javvin Packet Analyzer will continue not to use that decoder to decode the packets of the same type until you enable it again.

Decode view

To view the decode information of the current packet, press the Show Decode icon  in the toolbar to open the decode sub-view, or double click on the packet to open the Packet Decode window.

The packet decode view presents information based on the protocol used in packet transmission, click on the - minus or + plus signs in the margin to collapse or expand the view of any header section.

Decoding Packets 2

The following decode information is added by Javvin Packet Analyzer.

Name

Description

Packet Number

The packet number which is set automatically by Javvin Packet Analyzer.

Packet Length

The bytes size of this packet.

Capture Length

The bytes size captured by Javvin Packet Analyzer.

Timestamp

The actual time when the packet was captured.

The data in the decode view can be copied and pasted to the clipboard.

HEX and ASCII view

Push the Show Hex  icon in the Packets view or Packet Decode window to view the actual packet contents in Hex on the left and ASCII on the right (by default), or change ASCII decode to EBCDIC by choosing Show EBCDIC from the context menu with a right click on the Hex view.

The Hex view is graphically linked with the decode view, when you select a portion of packet contents in the decode view, Javvin Packet Analyzer highlights the selected portion and the corresponding Hex data and ASCII/EBCDIC data in the Hex view.

Decoding Packets 3