Remote Packet Capture Utility
PacketGrabber provides the ability to extend the expert analysis capabilities of OmniPeek across the network, from the network core to the most isolated segments and everything in between. PacketGrabber’s robust packet capture engine can be fully automated to capture only the packets needed for Expert Analysis with OmniPeek. The resulting trace file is then automatically forwarded via email, ftp or file server. |
|
PacketGrabber offers:
- Visibility into the Desktop
- Multiple NIC Support
- Remote Network Packet Capture
- High-speed Data Capture
- Automatic File Forwarding
- AutoCapture Templates
Features
PacketGrabber provides the network administrator with the ability to easily gather trace files from multiple locations of the enterprise network. Once collected, these trace files can automatically be forwarded to an appropriate individual for analysis. Through Capture Templates, PacketGrabber has the ability to trigger captures based on time, filters, and number of bytes.
Multiple NIC Support
Using multiple NIC support within PacketGrabber, packet capture can be performed simultaneously on one or more LAN segments with the same tool at the same time. This enables the placement of PacketGrabber in a location that can strategically capture information from different critical segments of your network and automatically forward it to OmniPeek for analysis.
Screenshots - Click on thumbnail for larger view |
 |
AutoCapture File (*.wac)
The AutoCapture file delivers the pre-configured options for PacketGrabber for these four items:
- Log File
- Adapter Settings
- Capture Template
- Send Options
As PacketGrabber was designed to be delivered to, and potentially deployed by, non-technical users, this pre-configured file allows for access to distributed packet analysis with a minimum of required user intervention. Users simply double-click on the AutoCapture File and the trace file will be delivered to the appropriate location.
Screenshots - Click on thumbnail for larger view |
 |
Adapter
Pre-election of the adapter allows the network administrator to specify the correct adapter for the end-user. PacketGrabber will attempt to select an adapter based on each criteria set by the administrator until the adapter is successfully selected. Various criteria are available to the administrator when selecting the adapter on the remote machine including first available and a particular adapter name.
Screenshots - Click on thumbnail for larger view |
 |
Capture Templates
The Capture Template takes advantage of all the familiar capture options users have come to recognize and employ in OmniPeek. These capture options include buffer wrap options, save locations, slicing, buffer sizes, and filters and triggers to use with a particular AutoCapture File. Multiple, simultaneous captures can be performed.
Screenshots - Click on thumbnail for larger view |
 |
Send
Possibly the most important feature of PacketGrabber is the ability to automatically send a data file to an appropriate location for analysis. The Send feature allows the network administrator to pre-configure PacketGrabber to forward saved trace files via email, ftp or shared volume.
Screenshots - Click on thumbnail for larger view |
 |
Filters
PacketGrabber ships with a number of pre-defined filters which are loaded, by default, into the Filters window. Filters ensure that the data you collect is precisely the data you need, focusing your attention on the issues that matter. These filters may be used as they are, or can provide a start for creating your own more precise filters. To ensure fluid automation, filters that are distributed with the AutoCapture File and have the same name can be automatically imported and leveraged in the troubleshooting of specific network issues.
Screenshots - Click on thumbnail for larger view |
 |
Triggers
Triggers are used to start or stop capture in a Capture window based on time, date and time, filter match, bytes captured, or a combination of these parameters. Since PacketGrabber uses pre-configured AutoCapture Files, the Stop Trigger is an important and powerful tool to terminate captures and initiate the transfer of files back to the network administrator.
PacketGrabber can automatically resume the monitoring for traffic to match a particular trigger after it has already been tripped once. This capability allows a more continuous capability for the monitoring of remote network segments.
Screenshots - Click on thumbnail for larger view |
 |