completely reworked protocol decoder: more supported protocols and
a summary for each packet.
·Support for USB adapters:
Ubiquiti SR71-USB (802.11 a/b/g/n), Proxim ORiNOCO 8494 (802.11
a/b/g/n), TP-Link TL-WN821N (802.11 b/g/n), NETGEAR WN111 v2
wireless adapters supported (Windows Vista or 7 required): Intel
3945, 4965, 5100, 5150, 5300, 5350.
improvements in the protocol decoder.
operating systems supported: Windows XP 64-bit Edition, Windows
Vista 64-bit Edition, Windows Server 2008 32-bit and 64-bit
·Decreased RAM utilization
in the VoIP analysis module. The new version can handle more
simultaneous calls using less RAM.
·Adjustable jitter buffer
for realistic simulation of real-live VoIP phone sound
·Improved "Find" dialog:
Search direction and Unicode search (UTF-8, UTF-16) are now
level is now displayed on the "Channels" tab.
flexible decoder tree options: You can now set the number of nodes
to be expanded.
other improvements and bug fixes.
module for advanced in-depth analysis, recording, and playback of
SIP and H.323 voice communications.
TCP session analysis that graphically displays session
packet builder that facilitates packet construction in Packet
·Support for cards based on
the latest Atheros chipsets.
level in dBm is now available in addition to signal level in
percentile (Atheros-based cards).
IPv6 support throughout the application (decoding, filters, search,
support in TCP session reconstruction.
·Optional reassembly of
fragmented IP packets.
alarm type: the application can pronounce messages using the
Windows text-to-speech engine.
improvements and configurable options related to decoding and
a resource leak under Windows Vista if the DPI value is set to 120
·Support for CommView
Remote Agent for WiFi.
·IP-to-country mapping for
IP addresses provides real-time geolocation for all IP addresses
shown by the application.
·Redesigned columns in the
"Packets" tab and "Log Viewer" to make them more convenient to use.
The column order on all tabs of the main application window is now
·Ability to create any
number of snapshots of the current packet buffer, which makes it
much easier to work with packets under a heavy network load. You
can now examine the buffer in separate windows, without the risk of
losing old packets and the need to look for packets that were
scrolled out of view.
·Colorization of Management
frames depending on their type.
·Improved alarms allow you
to easily detect Ad Hoc stations and send customizable e-mail
·Support for Intel
PRO/Wireless 2200BG and 2915ABG adapters (beta version).
·Support for new 802.11a
channels in the JP regulatory domain.
·Optional gridlines for a
better packet visibility.
Filters that allow you to easily create new packet views for
similar packets based on MAC addresses, IP addresses, or
Node Reassociation tool that can help you re-initiate WPA-PSK key
·Support for new 802.11a
·Updated MAC vendor
adapter is supported: TRENDnet TEW-501PC.
·Several new adapters are
now supported: 3Com OfficeConnect Wireless a/b/g PC Card
(3CRWE154A72), D-Link AirPlus G DWL-G630 Wireless Cardbus Adapter
(Rev. C), D-Link AirPremier DWL-AG530 Wireless PCI Adapter, NETGEAR
WG511U Double 108 Mbps Wireless PC Card.
driver has been updated to ensure compatibility with the latest
revisions of a number of D-Link adapters.
bugs related to capture file import/export and protocol decoding
have been fixed.
·Proactive scanning using
PROBE REQUEST packets (requires an adapter based on the Atheros
Generator is now available (requires an adapter based on the
advanced rules that allow the user to filter packets based on frame
types, frame subtypes, retry, duration, etc.
resolution time stamping (up to microseconds).
compact, open log format.
representing conversations between hosts.
decoding modules have been added: MS SQL, LDAP, and YMSG. SMB and
ICQ decoding has been improved.
Reports can include graphics.
new Nodes and Channels tabs give you detailed per-node and
per-channel statistics: Data transfer rates, signal strength, ICV
and CRC errors, etc.
·On-the-fly decryption of
WPA-encrypted packets in Pre-Shared Key (PSK) mode. This is a
unique feature not available in any other wireless network
performance improvements that allow you to monitor a heavily
utilized WLAN and decrypt traffic on the fly without using 100% of
the CPU time.
rogue AP detection alarm has been added.
versions of the drivers offer improved stability.
program now supports 802.11g and 802.11a wireless adapters.
program can log visited URLs.
protocol decoding modules have been added: IMAP, NNTP, SSH,
open plug-in interface allows you to implement your own protocol
Session Reconstruction windows can now decompress GZIP'd web
content, as well as display images being sent over HTTP
Session Reconstruction windows now allow you to jump to the next
TCP session between any two hosts (in the previous versions, you
could jump to the next session only between those two hosts that
were initially selected).
can have the program generate statistics on pre-captured data in
addition to real-time statistics.
functionality allows you to pass variables to launched applications
or alarm messages.
·Several other minor