Learn packet analysis with challenging Wireshark labs (+25 advanced PCAP case-studies) !

Capture Point Visualization

Packet Safari shows you where capture was taken in your network.

Collections

Packet Safari connection view gives you many benefits:

  • ⚡️ RTT based. Based on the iRTT of the handshake the capture point is determined.
  • ⚡️ TTL based. The TTL of packets from both directions also is accounted for.
  • ⚡️ MAC address labelling. Devices are labelled in the diagram based on the trace file.
  • ⚡️ IP address labelling. Devices are labelled in the diagram based on the trace file.
  • ⚡️ Device type detection. The engine tries to determine the device type seen in the trace.

iRTT Graph

The iRTT (initial round trip time) graph visualizes the initial round trip time between the two endpoints.

iRTT Graph