System information

Packet Capture Mode 67
Decode and Analysis Internet Observer – IP Subprotocols View
When IP Subprotocols is selected from the selection bar, a tabular display appears.
When IP Subprotocols is selected on the selection bar, the following items are displayed
in the bar above the main table:
• Stations—gives the number of stations in IP conversations.
• Displaying—describes what units are counted in the display.
• Filter—describes whether or not a filter is present.
The following items are displayed in the main table:
• DNS name—gives the Domain Name Server name of each station that generated
data in the present capture.
• IP address—gives the IP address of the station referred to in the previous column.
The remaining columns list all the IP subprotocols that Observer is capable of
recognizing. Some of the listed subprotocol columns may contain only zeroes,
indicating that no packets of that subprotocol are present in the capture buffer.
The display can be sorted by DNS name, IP address, or by any of the subprotocols.
Click once on the label of any column to sort by descending order; click twice on the
label of any column to sort by ascending order.
Reading and Writing Sniffer Files
Observer has the ability to read and write Network General Sniffer® formatted packet
capture files. This has been requested for sites that require the sending of Observer
capture buffers to Sniffer® users for viewing or analysis. Sniffer® captures can also
now be read by Observer to use Observer's decode facility on Sniffer® captures.
Observer fully supports the following: