Our most well known product is NetworkMiner, which is available in a professional as well as free open source version. We specialize in software for network forensics and analysis of network traffic. Pre-filtering the traffic has the advantage of obtaining the desired result much faster with Wireshark or Webshark.Netresec is an independent software vendor with focus on the network security field. Then all modules of the Multimeter can be used to search for exactly the traffic of interest.Īfterwards you can save the selected traffic as a pcap file by clicking the 'Capture PCAP' button (see screenshot) and then start analyzing the trace in Wireshark or, depending on the version of your Allegro Network Multimeter, in the integrated Webshark.Īs you can see, by using the Allegro Network Multimeter, a pcap can be analyzed rapidly and easily without losing Wireshark’s advantages.

Click the ‘Analyze PCAP’ button to start analysis (see screenshot).Īfter less than a minute, the four million packages stored on the USB stick are analyzed. The pcap then appears in the storage overview.

The file is downloaded to the Allegro Network Multimeter with a USB stick for subsequent pcap analysis. This isolation of the desired traffic or the incorrect traffic flows is achieved by the analysis modules integrated into the Allegro Network Multimeter. Therefore, you should only select the part of the traffic where the problem has been identified before analysing it in the usual way in Wireshark. Similar times are to be expected even when a filter is used. For example, a sample file containing three million packets can be read by Wireshark in 30 seconds, whereas a slightly larger one with four million packets takes more than eleven minutes. The problem with Wireshark is that as soon as a pcap exceeds a certain size, it takes longer to analyze the packets. Finding a fault can be tedious via Wireshark.

Pcap file analysis