Javvin Packet Analyzer User's Manual


Overview

Professional and enterprise

Version and upgrade

Install and Uninstall

Installation Environment

Get Started to Use

Create a Project and Capture Traffic

Select Capture Sources

Use Menu bar

Use Toolbar

Use Context menus

Use Start Page

Use Dock windows

Understand and Use Tab views

Choose System Options

Restart Capture and Do Automatic Capture

Project settings

HManage Data

Understand Statistics

Manage Filters

Use Command Line to Operate the Analyzer

Do TCP session Reconstruction Using Packet Analyzer

Set and Use Name Table

Manage Logs

Decode Packets

Customize User Interface

Optimize the Performance of the Analyzer


free download Free to try

Order Packet Analyzer Buy Now


Packets view

The Packets view presents a list of captured packets and the packet decode information in Hex, ASCII and EBCDIC. The following sections describes how to view a packet and its decode information, how to find related packets, and how to change the layout of this view.

 

 

 

 

 

 

 

Packets view

Packet list

Matching to the setting of Packet buffer size and When buffer is full in the Project Settings - General page, the packet list view offers the list of packets captured from the node selected in the Project Explorer.

Packets view 2

By default, the packet decode information are showed at the bottom of the Packets view. Click the layout icons to change the display. A packet decode window can be opened when you double click on a packet.

In addition to the common context commands as other tab views, this view also has the following special commands:

Command

Description

Decode Packet in New Window

Opens a new window to show packet decode information; alternately, you can double click on the packet.

Highlight Packet

Highlights the current packet.

Packet Comment

Adds, edits or deletes a comment for the current packet; the packet with a comment is marked with .

Summary

Shows the packet summary.

  1. Automatic - show the uppermost protocol summary
  2. IP Summary - show the packet summary of IP protocols; if no IP protocols, show the uppermost protocol summary
  3. TCP/UDP Summary - show the packet summary of TCP/UDP protocols; if no TCP/UDP protocols, show the uppermost protocol summary

Export Packet...

Exports selected packets to a file.

Set Relative Packet

Sets the current packet as the relative packet.

Select Related Packets

Selects and highlights the related packets by source, destination, source and destination, protocol or port.

Hide Selected Packets

Only shows the unselected packets.

Hide Unselected Packets

Only shows the selected packets.

Unhide All Packets

Shows all packets.

The columns in the Packets view offer many packet details. You can select more or less columns to show: right click on the column heading bar and choose the More... command to open the Select Column dialog, check the column headings you want to display.

If you only want to view those packets related to the current selection, you can first choose Select Related Packets and a condition from the context menu, Javvin Packet Analyzer will highlight all related packets; then right lick to open the context menu again and select Hide Unselected Packets.

The table below lists the column headings available in the Packets view and the specific meaning they indicate.

Default

Column Heading

Description

*

No.

The packet number which is set automatically by Javvin Packet Analyzer.

*

Absolute Time

The actual time when the current packet is transmitted.

*

Source

The IP address or physical address where the current packet is transmitted from.

*

Destination

The IP address or physical address where the current packet is transmitted to.

*

Protocol

The protocol used by the current packet in transmission.

*

Size

The bytes of the current packet.

*

Summary

The summary for the current packet.

 

Date

The date when the current packet is captured.

 

Delta Time

The time span between the current packet and the previous packet.

 

Relative Time

The time span between the current packet and the relative packet (if no relative packet is defined, the first packet is the relative packet).

 

IP Identifier

The identification number of an IP packet.

 

Source Physical

The physical address where the current packet is transmitted from.

 

Destination Physical

The physical address where the current packet is transmitted to.

 

Source IP

The IP address where the current packet is transmitted from.

 

Destination IP

The IP address where the current packet is transmitted from.

 

Source Port

The port number where the current packet is transmitted from.

 

Destination Port

The port number where the current packet is transmitted to.

 

Comment

The comment made for the current packet.

You can rearrange the column heading bar by changing a column's position or width.

Packet decode

The packet decode view is a part of the Packets view, presenting the decode information of selected packet, you can use the icon  to show or hide it. Alternately, the packet decode information can be showed in the Packet Decode window with double clicks on a packet row.

Packets view 3

To show the Hex view, click the icon , which contains the actual packet contents in raw hexadecimal on the left and its ASCII (or EBCDIC) equivalent on the right. The packet information in the packet decode view, Hex and ASCII/EBCDIC view are consistent, when you select a section in one of these views, the corresponding portions will be highlighted in the other views.

You may choose to show packet contents as ASCII or EBCDIC from the context menu by a right click in the Hex view. If you want to save the data, you can select Copy Hex or Copy Text.

The layout of the Packet Decode window can be changed; use the icon  and  to rearrange the display.

The context menus of the packet decode view and Hex and ASCII/EBCDIC view contain the following useful commands:

Command

Description

Copy (Ctrl+C)

Copies the selection and puts it on the clipboard.

Copy Tree

Copies the packet decode tree and puts it on the clipboard.

Expand All

Expands all items of the display.

Collapse All

Collapses all items of the display.

Copy Hex

Copies the selected Hex codes and puts it on the clipboard.

Copy Text

Copies the selected ASCII/EBCDIC text and puts it on the clipboard.

Show ASCII

Shows the decoded information as ASCII.

Show EBCDIC

Shows the decoded information as EBCDIC.