OmnipeekOmnipeek User GuideDownload PDF
The Capture Window : Capture window views
Capture window views
The navigation pane of every capture window presents the views that display information about the capture data. A capture window can have the following views:
Dashboards: These dashboards display graphical data about your network summarized into several easy-to-read displays.
Timeline: This dashboard provides an overview of the top talkers, top protocols, and network utilization for the Capture Engine. See Timeline dashboard.
Applications: This dashboard provides key statistics for applications in the capture window. See Applications dashboard.
Network: This dashboard provides an overview of network statistics for the capture. See Network dashboard.
Voice & Video: This dashboard provides a visual display of several VoIP-related statistics for the capture window. See Voice & Video dashboard.
Compass: This dashboard lets you view network utilization, and top statistics from a real-time capture occurring on an Omnipeek network analyzer, from a single supported capture file, or from multiple Omnipeek capture files. See Compass dashboard.
Capture: These views display information about packets captured into the capture buffer.
Packets: This view lists all of the packets placed in the buffer of a capture window (or capture file). The Decode and Hex panes show the contents of the selected packet decoded or in hexadecimal and ASCII. See Viewing captured packets.
Events: This view collects messages generated by events relating to the particular capture window. These events include the results of notifications generated by the triggers or analysis modules selected for the capture window. See Viewing Logs and Events.
Notes: This view displays a listing of all notes associated with packets in a capture file. You can edit or delete notes, or you can jump to the packet list selecting the packet to which each note is attached from the Notes view. See Adding notes to packets and Viewing packet notes.
Filters: This view lets you enable, disable, add, edit, and delete filters used for capturing packets into the capture window buffer. See Creating and Using Filters.
Alarms (Capture Engine only): This view lets you query a specified statistics function once per second, testing for user-specified problem and resolution conditions. On matching any of these tests, the alarm function sends a notification of user-specified severity. See Setting Alarms and Triggers.
Expert: These views provide expert analysis of delay, throughput, and a wide variety of network events in a conversation-centered view of traffic in a capture window. See Expert Analysis.
Clients/Servers: This view makes it easy to track events and to see them in the context of peer-to-peer or client-server traffic patterns. See Expert Clients/Servers view.
Flows: This view displays each flow independently in a flat view. This simplified view allows you to compare flows to one another, regardless of the node pair to which they belong. See Expert Flows view.
Application: This view allows you to categorize each flow by application. This view allows you to see who is using each application on your network and how each application is performing. See Expert Applications view.
Web (Omnipeek only): These views let you display web page requests and responses, allowing you to track client/server activity within a capture. The same web data is presented in four formats.
Servers: This view lets you focus on which servers are being used. See Servers view.
Clients: This view lets you focus on which clients are using which servers. See Clients view.
Pages: This view displays a list of web pages with each individual request nested underneath. See Pages view.
Requests: This view displays a flat list of individual HTTP requests. See Requests view.
Voice & Video: These views let you display the voice and video data in the following formats:
Calls: This view displays one row for each call. See Calls view.
Media: This view displays one row for each media flow. See Media view.
Visuals: These views graphically display network traffic and statistics.
Peer Map: This view lets you visualize network traffic by displaying nodes and the traffic between the nodes. The lines indicate traffic between two nodes. The relative thickness of the lines indicate the volume of traffic occurring. See Using the Peer Map.
Graphs: This view displays graphs of individual items from the other statistics views in real time. The data from these graphs can also be saved as tab-delimited or comma-delimited text, or as XML \ HTML. On a Capture Engine, this view must be enabled in the Graphs options of the Capture Options dialog. See Omnipeek capture window graphs.
Files: This view displays files extracted from reassembled HTTP payloads of capture files opened in Omnipeek. This view lets you quickly see the files that are being transmitted across your network. See Working in the Files view.
Statistics: These views display various statistical data about your network.
Nodes: This view displays real-time data organized by network node. You can choose to display the nodes in a nested hierarchical view (logical addresses nested beneath their physical address), or in a variety of flat tabular views. Right-click the column header to add or remove various columns. See Nodes statistics.
Protocols: This view displays network traffic volume as a percentage of total bytes, broken down by protocol and subprotocol. You can choose to display the protocols in either a nested Clients/Servers view or a Flows view. See Protocols statistics.
Summary: This views lets you view key network statistics in real time and save those statistics for later comparison. Summary statistics are also extremely valuable in comparing the performance of two different networks or network segments. See Summary statistics.
Applications: This views lets you view basic statistics about applications for a capture window. See Applications statistics.
Countries: This views lets you view a geographical breakdown of traffic based on IP address for a capture window. See Countries statistics.
Wireless: These views display information about your wireless network.
WLAN: This view displays an SSID (Service Set Identifier) tree view of wireless nodes. See WLAN statistics.
Channels: This view displays a variety of statistics and counts for each wireless channel. See Channel statistics.
Signal: This view displays continuously updated graphs of signal strength (or related measures) for traffic in the capture window. See Signal statistics.
Roaming: These views display roaming latency—the amount of time it takes for a wireless device to move from one access point to another.
Log: This view displays a log entry each time a wireless roaming device is detected. See Log.
by Node: This view displays an entry for each wireless roaming device, and calculates an average latency value for that device. See by Node
by AP: This view displays an entry for each wireless access point, and calculates an average latency value for that access point. See by AP.
IMPORTANT: Your version of the software may not include all of the views listed here. Please visit our web site at for details about how to order the features that precisely fit the needs of your network.