There's more!

EtherPeek NX™

> ## There's more!

> There are many more features to explore with EtherPeek NX, but not enough space here to document them all. We suggest you look at these additional features:

> #### Name Table and name resolver options

> The Name Table lets you assign your own symbolic names to addresses, ports and protocols. It is easy to create and update Name Table entries in EtherPeek NX. You can also save and restore (export and import) the contents of the Name Table. This allows you to keep separate Name Tables for different network segments or office locations.

> Providing names in place of logical or physical addresses makes the task of identifying packets of interest much simpler.

> EtherPeek NX can scan all traffic, searching for logical and symbolic names in the contents of passing packets. You can control how and whether EtherPeek NX adds these passively discovered names to the Name Table, and tell it how to automatically age these entries, deleting those that remain unused after a certain time.

> #### Analysis Modules

> Analysis Modules are external modules that provide expert analysis features to the program. An Analysis Module tests network traffic and provides detailed summaries and counts of key parameters of one specific type of traffic, posting its results in the Summary Statistics window and/or in the Summary column of the Packets view of Capture windows and Packet File windows.

> The Analysis Modules shipped with EtherPeek NX cover a wide range of the most common protocols and network applications. You can enable and disable Analysis Modules individually. In addition, many Analysis Modules have user-configurable options, which can be used to further refine the data you collect about your network.

> #### Triggers

> Automate the start and stop of capture using triggers. Any filter can be specified as a trigger criterion. You can also set a trigger to start or stop packet capture based on time and date settings, so you can focus captures with pinpoint accuracy. Look for trigger options in the Triggers view of the Capture Options dialog.

> #### ProtoSpecs and protocol definitions

> WildPackets' ProtoSpecs technology offers a very fine level of protocol layer detail by identifying the top-level "parent" protocol and breaking-out each subprotocol layer in a hierarchical view. Look for ProtoSpecs in EtherPeek NX's Capture windows, Filters and Protocol Statistics windows. Display protocol information based on a total of the subprotocols under the parent protocol, or by each subprotocol broken-out by individual layers.

> EtherPeek NX provides a definition of what a protocol abbreviation stands for and a concise description of how a protocol is used. This on-line help mechanism will assist you in determining the purpose of previously unseen packets on the network as well as help to increase your knowledge of LAN/WAN protocols. To view the definition for any particular protocol or subprotocol from any packet list view or Protocol Statistics window, click on your selection and then choose the Protocol Info command from the context menu.

> #### Selecting, hiding and unhiding packets

> The statistical, Expert, and Peer Map views of Capture windows and Packet File windows are recalculated and redrawn each time there is a change in the visible packets in the Packets view. By selecting, hiding and unhiding packets, a user can perform sophisticated analysis on captured traffic quickly and easily.

> The Select... command from the Edit menu brings up the Select dialog that allows you to apply existing filters to captured packets, to select based on string content or packet length, or to select based on Analysis Modules. You can select either all packets matching your criteria or all those not matching.

WildPackets, Inc.
http://www.wildpackets.com
Voice: (800) 466-2447
Fax: (925) 937-2479
sales@wildpackets.com