completely reworked protocol decoder: more supported protocols and
a summary for each packet.
operating systems supported: Windows Server 2008 32-bit and 64-bit
·Decreased RAM utilization
in the VoIP analysis module. The new version can handle more
simultaneous calls using less RAM.
·Adjustable jitter buffer
for realistic simulation of real-life VoIP phone sound
·Improved "Find" dialog:
Search direction and Unicode search (UTF-8, UTF-16) are now
flexible decoder tree options: You can now set the number of nodes
to be expanded.
other improvements and bug fixes.
module for advanced in-depth analysis, recording, and playback of
SIP and H.323 voice communications.
TCP session analysis that graphically displays session
packet builder that facilitates packet construction in Packet
IPv6 support throughout the application (decoding, filters, search,
support in TCP session reconstruction.
·Optional reassembly of
fragmented IP packets.
alarm type: the application can pronounce messages using the
Windows text-to-speech engine.
improvements and configurable options related to decoding and
a resource leak under Windows Vista if the DPI value is set to 120
or higher and possible system crash if a dial-up connection is
·IP-to-country mapping for
IP addresses provides real-time geolocation for all IP addresses
shown by the application.
·Redesigned columns in the
"Packets" tab and "Log Viewer" to make them more convenient to use.
The column order on all tabs of the main application window is now
·Ability to create any
number of snapshots of the current packet buffer, which makes it
much easier to work with packets under a heavy network load. You
can now examine the buffer in separate windows, without the risk of
losing old packets and the need to look for packets that were
scrolled out of view.
·Improved alarms allow you
to send customizable e-mail alerts.
·Optional gridlines for a
better packet visibility.
Filters that allow you to easily create new packet views for
similar packets based on MAC addresses, IP addresses, or
·Filtering by process name
is now available.
·Updated MAC vendor
other improvements and bug fixes.
·Packets are mapped to the
application that sent or received them (this functionality is
available under Windows 2000/XP/2003).
resolution time stamping (up to microseconds, available under
compact, open log format.
representing conversations between hosts.
decoding modules have been added: MS SQL, LDAP, and YMSG. SMB and
ICQ decoding has been improved.
·Windows XP 64-bit Edition
on AMD Opteron and Athlon64 processors is now supported.
Remote Agent connections are now supported.
·Improved Packet Generator
featuring convenient access to templates.
Reports can include graphics.
can now capture loopback packets being sent from/to local IP
addresses, e.g. 127.0.0.1 (this functionality is available under
program can log visited URLs.
protocol decoding modules have been added: IMAP, NNTP, SSH,
open plug-in interface allows you to implement your own protocol
Session Reconstruction windows can now decompress GZIP'd web
content, as well as display images being sent over HTTP
Session Reconstruction windows now allow you to jump to the next
TCP session between any two hosts (in the previous versions, you
could jump to the next session only between those two hosts that
were initially selected).
program will notify you about changes in the list of network
·Capturing is restarted
automatically after Windows hibernation or suspension.
Ring adapters are supported (this functionality is available under
frames are supported.
can have the program generate statistics on pre-captured data in
addition to real-time statistics.
functionality allows to you to pass variables to launched
applications or alarm messages.
other minor improvements.
·Alarms: You can configure
the program to notify you about certain packet occurrences, unknown
MAC addresses, etc.
protocol decoding modules have been added: DAYTIME, DDNS, H.323
(H.225, Q.850, Q.931, Q.932), HTTPS, NTP, RMCP, RTP/RTCP (G.723,
H.261, H.263), SNTP, TIME.
custom decoding module can be used with the program.
command-line parameters that allow you to load automatically rule
sets and/or open adapters.
Session Reconstruction windows now have the "Find" function.
UDP, and ICMP packet templates in Packet Generator.
"Decode As" function that can be used to decode supported protocols
using non-standard ports.
number of new configurable options.