TamoSoft: Network Analysis Tools & Security Software
Contents

NetResident Help Documentation


    Return to the main product page
 
Interface Overview


NetResident can display current information using views that can be changed using the Events => Views menu item or by clicking the corresponding button on the toolbar. The program's appearance may vary depending on the selected view, but basically, the main application window has three sections that present the data in a structured format and allow you to filter and sort network events and access them quickly.

Note: Depending on your search settings, the main program window may contain several tabs: The All Data tab that shows all captured information as well as other tabs that correspond to your Search Set(s). The data structure inside the tabs is explained below.

The Group View shows network events grouped by the dates they occurred, network protocols, and hosts engaged in communications. Checking or unchecking the boxes next to a group will include/exclude the events that belong to the group to/from the Event List section. The hosts are grouped into Parties that represent the parties involved in the communication process. Party A includes all IP addresses/hostnames on the local side of the communication. If you only use one network interface to connect to the Internet, you will usually have only one entry under this Party. However, if you use your LAN adapter as the main Internet connection method, but also use your Dial-Up adapter occasionally, or if you have an IP address dynamically assigned to your computer each time you connect, you will have several entries in this Party. Party B includes all remote hosts that have communicated with the local host(s). Please refer to Arranging the Data
for more information.

The Explorer View is similar to the Group View except that it shows network events grouped by network protocols only. We suggest that you use this view if you would like to see the events of the specified protocol: i.e. all ICQ messages for the specified period of time. Clicking on the plus sign will expand the nodes, allowing you to select and view the desired network events. Please refer to Arranging the Data
for more information.

The Event List section displays a list of events available for viewing under the following columns:

Date – the date the event occurred
Protocol – the protocol used for data transmission
Party A, Party B – indicates the hosts that sent and received data
Port A, Port B – the ports used for data transmission
Last updated – the date and time the event was last updated
Description – displays the event summary
ID – event ID (invisible by default)
Priority – user-defined event priority (invisible by default)
Comment – user-defined event comment (invisible by default)
Flags – event flags (invisible by default)

The Event Detail section displays the actual contents of the event selected in the Event List section. It can only display one event at a time.

The main window also has a Status section for displaying system messages produced by the program.

NetResident consists of two parts: The NetResident console that connects to the NetResident service, processes the data, groups it, and presents it to the user and the NetResident service that monitors the network, captures the data, and stores it in the database
for processing and viewing.

NetResident uses network protocol plugin modules for processing the collected data. You can enable or disable certain plugins to make sure that you see only the desired data.

GroupView


Main Menu   
   

   
   
File      

      Connect   Makes a connection to the NetResident Service   
      Disconnect   Disconnect from the NetResident Service   
      Manage Database   Launches the Database Management Wizard   
      Import Logs   Launches the Log Import Wizard   
      Exit   Closes the program   
   
   
Search      

      Find         Searches the events for the specified string    
      Find Again      Repeats the search   
      New Search Set      Launches the Search Set Wizard   

      Delete Search Set   Deletes currently active Search Set   
      Edit Search Set      Edits currently active Search Set   

   
   
View      

      Status Window   Shows/hides the Status Window   
      Status Bar   Shows/hides the Status Bar   
   
   
Events      

      Refresh/ Stop Refreshing   Refreshes all events/stops the refreshing in progress   
      Filter   Allows you to set event filters   
      Save    Saves the current event list or event details to a file
      Delete   Deletes selected events from the database
      Event Detail   Shows/hides the Event Detail section
      Views   Switches the main window's views   

      Host Display Mode   Changes the mode for displaying the hosts in the Group View and Events List sections   
   
   
Tools      

      Aliases   Displays the Aliases dialog   
      Options   Displays the Options dialog   
      Setup Wizard   Launches the Setup Wizard   
      Anti-Switch Tool   Starts the PromiSwitch application

      Languages   Allows you to select the language of the user interface   
   
   
Help      

      Contents   Launches NetResident help   
      Search For Help On …   Shows NetResident help index
      Check for an Update on the Web…   Check for an update on the TamoSoft Web site   

      About   Shows the About window