Su Xian Chow Aaron Corso COSC

 A network analyzer; primarily used as a packet sniffer  Supports sampling  Monitoring the network sessions log  Applying data mining techniques to the database of the sessions  Handling events

 Current being developed at Politecnico di Torino (an engineering college in Torino, Italy)  Released under a BSD license  Free to download by any user

 Analyzer is a front-end interface for the WinPcap (Windows Packet Capture) driver.  WinPcap must be installed first. The installation process uses an installer and is very easy  The actual program install is also very easy, as it uses an installer

 The documentation is readily available on the developer’s websitedocumentation  The documentation is complete, but could be presented in a better fashion (wiki)  Did not run into any issues while conducting tests

Step 1: Open Analyzer and select Start Capture

Step 2: Select the appropriate capture device from the capture settings dialog

Step 3: If desired, choose “Capture Advanced Setting”. You may specify capture duration, schedule a capture for a future time or choose to sample packets instead of showing all packets.

Step 4: You may filter certain incoming packets. Here we are only requesting ARP request traffic.

Step 5: Begin the capture

Step 6: You can inspect details from the packets.

Step 7: You can save your capture to disk.