background image
132
Chapter 3
Generic Troubleshooting Tools
The Edit menu list allows you to delete a single packet, delete all packets,
and move within the capture buffer by specifying the line number. You can
also insert a comment into the packet buffer, by highlighting where you want
the comment to go and then selecting the Insert Comment option.
To aid in troubleshooting, you can tag certain packets by using the Toggle
Marker option in the Edit menu. This option is helpful for selecting packets
that belong to a single session or machine. It lets you move between marked
packets to see the sequence of events relating to the tagged packets. The
toggle marker highlights the timestamp of the specified packet. You can
move between marked packets by using the toggle options available from the
Edit menu.
Finally, the Edit menu allows you to perform searches within the packet
buffer. A screen shot of the Edit menu is shown in Figure 3.8.
F I G U R E 3 . 8
Edit menu for LANWatch32
Three views are available with LANWatch: Examine, Summary, and
Detail. The different views are used to show all packets, an individual packet
summary, and individual packet details, respectively. Figures 3.9, 3.10, and
3.11 show the differences between the three views. Each subsequent view is
similar to "drilling down" into the packet's content.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com