Back to main page

Ultra Network Analyzer

Main Menu
   File Menu
   Capture Menu
   Monitor Menus
   Tools Menu
   Help Menu

Protocol Packet Analyst
   Packet Page
       Packet Tool Button
       Packet List
       Packet Decoders
       Packet Hex
   Protocol Statistics Page
       Protocol Statistics List View
       Protocol Statistic Chart
   Mac Traffic Statistics Page
   Mac Statistics Page
       Mac Statistics List View
       Mac Statistic Chart 
   IP Traffic Statistics Page
   IP Statistics Page
       IP Statistics List View
       IP Statistic Chart
   Chart Tool Bar

Packet Generator
   Data Frame Editor
   Packet Generator Option

Network Analyst Option

Connection Monitor

Toolbar

How to ...

    How to capture network packet ...

    How to filter packet ...

    How to search network packet ...

    How to send network packet ...

1.Main Menu

• File Menu
  

  The File menu offers the following commands:

  
     
  

  　

  Command	Description
  Open	Open Captured Packet File that saved by Ultra Network Sniffer
  Select Adapter	Popup the network adapter dialog, and Choose network adapter to monitor.
  Exit	Exits Ultra Network Sniffer

  　

2.Protocol Packet Analyst

• Packet Page
  
  Packet page lists,analyzes and decoders all of captured packet. It also provides exporting and saving function for offline analyzing. It's contain Packet Decoder View,Packet List View,Packet Hex View.
  
  
  

  • Packet Tool Button
    
    The Packet Tool Button offers the following commands:
    
    ,, customize location of Packet List,Packet Decoder and Packet Hex;
    Save the current captured packet to disk files.(file extension is npd) so user can open this captured file for analyzing later.
        Export the current captured packet to the format of HTML,CSV,TXT etc.
    Find the cpatured packet with the specified content.
    
    

  • Packet List
    
    
    
    This window displays packets as they arrive from the wire. The packet display window allows you to select specific packets to be shown in the Decoder Window,It also allows you to right click a specific packet and perform certain functions on it.
    User can drag packet to packet generator windows for send the packet to network.
    
    

  • Packet Decoder
    
    This window is used to display information about the structure of the packet from Packet List window, in an easy to understand tree form.
    
    It shows the selected packet broken down into its constituent parts.
    This provides a simpler way of displaying the various aspects of the packet. The window uses a standard folder-type interface, in which the various packet headers are broken down for easier viewing.
    Each header it finds (MAC Header, IP Header, ICMP Header, TCP Header, and UDP Header) will be broken down, displaying each part of the packet and the data it contains within.
    
    If the Packet Hex display is open, it will correlate the selected part of the decoded packet to the actual Hex-Dump of the packet. The selected portion will be displayed in the Hex-Dump in red.
    
    

  • Packet Hex
    
    
    
    Show the content of current selected packet from Packet List.
    
    

• Protocol Statistics Page
      Protocol Statistics Page contains Protocol Statistics list view, Protocol Statistics Chart.
  
  

  • Protocol Statistics List View
    Protocol Statistics List View displays various protocol distribution traffic.It's include protocol name,statistics by packets and bytes. User can check protocol item in Protocol Statistics list view to chart this protocol item.
    
    

  • Protocol Statistic Chart
    Protocol Statistics Chart can show the number of packets or the traffic volume (bytes) and can be viewed in 3 different modes (Horizontal Bars, Pie, and Doughnut). User can use Chart Tool Bar to update chart statistics mode.
    
    
    

• Mac Traffic Statistics Page
  This page displays detail information about network connections (all of ETHERNET) .
  
  

  Station 1	1st Station Mac address
  Packets	Packets sent by 1st Station
  Bytes	Bytes sent by 1st Station
  Bytes	Bytes sent by 2nd Station
  Packets	Packets sent by 2nd Station
  Station 2	2nd Station Mac address

  　

• Mac Statistics Page
  Mac Statistics Page contains Mac Statistics list view, Mac Statistics Chart.
  
  
  • Mac Statistics List View
    Mac Statistics List View displays various distribution traffic between hosts.It's include Mac address,grand of sent packets,sent bytes,received packets,received bytes. User can check mac item in Mac Statistics list view to chart this Mac item.
    
    
  • Mac Statistic Chart
    Mac Statistics Chart can show the number of packets or the traffic volume (bytes),also can be based on sent ,received,both, and can be viewed in 3 different modes (Horizontal Bars, Pie, and Doughnut). User can use Chart Tool Bar to update chart statistics mode.
    
    
    
• IP Traffic Statistics Page
  

  This page displays detail information about network connections (IP protocol only) .
  
  

  Station 1	1st Station IP address
  Packets	Packets sent by 1st Station
  Bytes	Bytes sent by 1st Station
  Bytes	Bytes sent by 2nd Station
  Packets	Packets sent by 2nd Station
  Station 2	2nd Station IP address

  
  

• IP Statistics Page
  IP Statistics Page contains IP Statistics list view, IP Statistics Chart.
  
  
  • IP Statistics List View
    IP Statistics List View displays various distribution traffic based on IP protocol.It's include IP address,grand of sent packets,sent bytes,received packets,received bytes. User can check IP item in IP Statistics list view to chart this IP item.
    
    
    
  • IP Statistic Chart
    IP Statistics Chart can show the number of packets or the traffic volume (bytes),also can be based on sent ,received,both, and can be viewed in 3 different modes (Horizontal Bars, Pie, and Doughnut). User can use Chart Tool Bar to update chart statistics mode.
    
    
    
• Chart Tool Bar
  

  	Press this button. Statistic Chart will be based on the number of packets.otherwise It will be based on the traffic volume of packets.
  	Press this button. Statistic Chart will be only collected sent network packets
  	Press this button. Statistic Chart will be only collected received network packets.
  	Press this button. Statistic Chart will be collected both received and sent network packets.
  	Press this button. Statistic Chart will be show in Pie modes.
  	Press this button. Statistic Chart will be show in Horizontal Bar modes.
  	Press this button. Statistic Chart will be show in Doughnut Mode.
  	Press this button. All of unselected item will be collected to other slice. Otherwise they will be ignore.
  	Press this button. Save chart to disk.

  
  

3.Packet Generator

	Create an empty data frame.
	Edit the selected data frame.or double click selected data frame.
	Delete the selected data frame.
	Send the selected data frame to network.
	Stop sent progress.
	Setting of packet generator.

• Data Frame Editor
  
  
  
  The Data Frame Editor allows user to change the packet contents and have the packet decode displayed in the bottom window as you edit it. You can create packets of any kind; you can choose which network adapter to send this packet. User can use compute CRC to automatically correct checksum.
  
  
  
• Packet Generator Option
  
  
  
  Delay: Controls the speed at which packets will be sent. Be sure not to send packets too fast if you have a slow connection. For example, sending a 1,000 byte packet 5,000 times per second is more than your 10Mbit NIC can handle.
  
  Continuous: select this option if you want the Packet Generator to send packets continuously until you click Stop.
  
  Time(s): select this option if you want the Packet Generator to send a packet a given number of times.

4.Network Analyst Option

• Click (Option) button on toolbar. "Network Analyst Options" will be displayed.
  
  
  
  Color Page: User can use this tools to customize color of protocol for displayed in Packet List,Packet Decoder and Packet Hex.
  If user selected "Mark Sub Protocol in summary"
  
  Protocol Page: User can use this tools to filter packets based on protocol. If the protocol is not selected , the network packet relatived to this protocol will be filtered.
  
  Advance Filter: User can use this tools to filter packets based on Mac Address or IP address.
  

  Station 1: First host address.

  Station 2: other side host address.

  dir.: The direction of packet transmit.

  Mode: Include is used for filter all of matching packet.

  Exclude is used for capturing all of matching packet.

  
  Data Pattern: User can use this tools to filter more complex data packet. Use can create condition express to filter packet based on protocol and data pattern.

  　

5.Connection Monitor

Connection Monitor displays all of current TCP/IP network connections and their statistics.User can disconnect any TCP connection anytime.

	Choose application to monitor.
	Captured the network packets generated by the selected application or connections.
	Disconnect the selected TCP connection.

6.Toolbar

: Start capturing network packet.and popup "packet analyset windows".
: Stop capturing.
: Open "Network Analyst Options" Dialog

7.How to capture network packet ...

• Step 1. Select network adapter.
  
  Before you start a capture, you should select one or more network adapter that is your interesting.User also can open this dialog by clicked in the main menu.
  
  
  
  Notes: If you want to monitor Modem, ISDN ,Dial-up connections, Please Choose the device named "NdisWanIp" in Windows NT,2000,xp.
  
  Warning: Don't choose the adapter named "RAS Async Adapter", because the current version can't support this adapter.
  
  
• Step 2. Capture
  
  Click (Start capturing) button on toolbar. sniffer will automatically open a "Protocol Packet Analyst" window to show captured packet list.
  

8.How to search network packet ...

1. Search packet in packet list.

Click right mouse button to popup the following menu on packet list. Then click ¡®search¡¯ menu item will popup the search dialog. or click on Packet Tool Button. "Find" Dialog will be displayed.



Search Text: Provide a space for you to specify the search text. Type the text in the find what box. Use the drop-down list to select previous search strings.

Summary Text: When selected, find the search string in the summary.

Data Hex: When selected, format the search string to hex. Hex strings should have two characters per byte and each byte may be separated from another with a space. Examples: FF 01 0A 0C.

Data ASCII: When selected, the search will be for hexadecimal characters in packet data. Optionally the find may be configured to search for ASCII characters.

Search Direction: The default search direction is down (toward the end of packet list). The option to search up is toward the start of packet list. The option to search all is show that the search scope is all of packet list.

Match Case: By default, the search will not be case sensitive. The option to make the search case sensitive is given.

2. Search next matched network packet.
Press F3 or click "search next" item in context menu to search next matched network packet.

9.How to filter packet ...

Click (Option) button on toolbar. "Network Analyst Options" will be displayed.

Examples: only capture data from 10.0.0.2 and "ip" protocol.

1. Select main menu "monitor-->option"
2. select page named "Protocol Filter"
3. Uncheck all protocol and Only check protocol "IP" and its parent protocol and child protocol.
4. Select page named "Advance filter".
5. Check IP method in list box,you will see a list in right part of page.
6. There are thee button on right of list,buttion "+" is used for adding one IP Filter,"-" is used for deleting one IP filter . ".." is used for modifying.
7. Click button "+" to add ip filter.IP filter dialog will show.
8. Fill 10.0.0.2 ip into station1 and fill "any ip address" to staton2 fields on dialog.
9. Fill the interested protocol into Protocol Type.
10. Fill direction between stations into dir.
11. Mode: Include is used for discarding all of matching packet.
Exclude is used for only capturing all of matching packet.

BTW: you also use page named "data pattern" to filter more complex data packet.

10.How to send network packet ...

• 1. Open Packet Generator
• 2. User right button to drag network packet from Protocol Packet Analyst.
• 3. Click edit button to edit the selected network packet.
• 4. Open "Packet Generator Option" to configure sent option.
• 5. Click Send button to send network packet out.