The Forensics view displays the captures that are saving files to disk, and provides statistics for each of those captures. Click the capture to view. Only one capture is displayed at a time.
The parts of the Forensics view are described below.
- Forensic search: Select to create or edit a forensic search. The Forensic search dialog appears and allows you to configure the Forensic search settings.
- Download packets: Select to download packets taking place on the capture. You can configure and filter settings to specify the packets to download.
- View: Select to choose the type of data displayed in the view.
- Sample interval: Select to change the sample interval.
- Refresh: Select to refresh the Forensics view. You can click the small arrow to change the interval for refreshing the display.