Is a portable network performance analysis and diagnostics tool provide tremendously powerful and comprehensive packet capture and analysis solution with an easy to use interface allowing both veteran and novice users the ability to protect and monitor networks in a critical business environment. Capsa aids in keeping you assessed threats that may cause a significant business outage.
Since all network communications are based on protocols and different protocols indicate varieties of network behaviors, by analyzing protocols using a protocol analyzer, we get to know what network applications are used on the network and what network behavior is taken against your network.
The packet is the smallest unit in network transmission and packets don’t lie to you. It will tell you all about the purpose of the packet, source and destination, content, and more. Packet decoding information lets you look through the packets themselves, which is very useful in troubleshooting your network to track down security vulnerability or learning more knowledge about protocols and network services.
As a network analyzer (aka. packet sniffer & protocol analyzer), Capsa makes it easy for us to monitor and analyze network traffic in its intuitive and information-rich tab views. With Capsa’s network traffic monitor feature, we can quickly identify network bottleneck and detect network abnormities.
The logs in Colasoft Capsa can record global or scope-specific network events, containing four types of log primarily generated by the advanced analyzers: HTTP requests, email messages, FTP transfers, DNS analysis, and four instant messenger activities: MSN activity, AIM activity, ICQ activities, and Yahoo Messenger Activities.
Colasoft Capsa is able not only to automatically detect and clearly identify network events but also to suggest corresponding solutions. You may also set your own thresholds according to your network’s characteristics.
In Capsa’s “Endpoints” view, all endpoints detected will be listed with their respective statistics and general information such as aggregated traffic and real-time traffic. We can group endpoints hierarchical order or by MAC and IP addresses. For remote endpoints, we can easily find its geographic address in the GEO column. With its easy sorting feature. We can easily sort all endpoints by different attributes.
“Matrix” is a view that visualizes all network connections and traffic details in one single graph. The nodes around an elongated ellipse display the hosts in your network; the weight of the line between the nodes indicates the traffic, and the color indicates the communication status. By clicking on a single node, you can view its detailed traffic information.
Without a reconstruction of packets, you can see only meaningless words like H, L, L, O, E, which is originally “Hello”.The “Conversation” view in Colasoft Capsa shows you how the original sentence the computer is talking about rather than scattered and out-of-order packets.
Capsa will run with an NDIS 3 or higher compatible Ethernet, Fast Ethernet, or Gigabit promiscuous mode network adapter. Promiscuous mode is the ability to have Capsa take over the driver and put it into a mode that will allow it to passively capture all packets on an Ethernet wire, regardless of the address to which they are being sent/received.
Colasoft has tested adapters based on Atheros, Ralink, Marvell, and Intel chipsets. Other wireless cards may work with this version to the same degree that they worked in prior versions.
Atheros AR7015, AR6004, AR9380, AR9382, AR9390, AR9485, AR9462, AR958x
Intel 1000, 4965, 5100, 5150, 5300, 5350, 6200, 6250, 6300, 6350, AC 7260, 82579LM
Realtek RTL8188CU, RTL8192CU, RTL8187
Broadcom 4313GN 802.11 b/g/n
TP-Link TL-WDN3200(5.1.7.5014), TL-822N v2
D-Link DWA-160 B2(5.1.7.5014)
For more details, you can check the Reference Book.