System information
Packet Capture Mode
65
To view Decode and Analysis – Internet Observer View, click on the “Internet
Observer” navigation tab at the bottom of the Decode and Analysis window.
In Internet Observer View, the top tabs include three options for viewing capture
Internet data: Internet Patrol, IP Pairs (Matrix), and IP Subprotocols.
Decode and Analysis Internet Observer – Internet Patrol View
When Internet Patrol is selected, the following items are displayed in the bar above the
main table:
• Station pairs—gives the number of station pairs in the capture buffer engaged in IP
conversations. A “station pair,” consists of a station sending traffic to another
station in one direction. If Station A is sending traffic to Station B and Station B is
sending traffic to Station A, that is counted as two station pairs.
• Filter—describes whether or not a filter is present.
The following items are displayed in the main table:
• Station (by MAC)—gives the MAC address of each station.
In the charts, this is generally referred to as Station 1, or simply as 1.
• Talking to (by IP)—gives the IP address of each station involved in the
conversation with the station listed in Station (by IP), above.
In the charts, this is generally referred to as Station 2, or simply as 2.
• First seen—displays the time of the earliest packet in the capture sent by the station
listed in Talking to (by IP).
• Last seen—displays the time of the most recent packet in the capture sent by the
station listed in Talking to (by IP).
Navigation
tabs
Top tabs