1. Su Xian Chow Aaron Corso COSC 316 001

2.  A network analyzer; primarily used as a packet sniffer  Supports sampling  Monitoring the network sessions log  Applying data mining techniques to the database of the sessions  Handling events

3.  Current being developed at Politecnico di Torino (an engineering college in Torino, Italy)  Released under a BSD license  Free to download by any user

4.  Analyzer is a front-end interface for the WinPcap (Windows Packet Capture) driver.  WinPcap must be installed first. The installation process uses an installer and is very easy  The actual program install is also very easy, as it uses an installer

5.  The documentation is readily available on the developer’s websitedocumentation  The documentation is complete, but could be presented in a better fashion (wiki)  Did not run into any issues while conducting tests

6. Step 1: Open Analyzer and select Start Capture

7. Step 2: Select the appropriate capture device from the capture settings dialog

8. Step 3: If desired, choose “Capture Advanced Setting”. You may specify capture duration, schedule a capture for a future time or choose to sample packets instead of showing all packets.

9. Step 4: You may filter certain incoming packets. Here we are only requesting ARP request traffic.

10. Step 5: Begin the capture

11. Step 6: You can inspect details from the packets.

12. Step 7: You can save your capture to disk.