Omnipeek User Guide - Omnipeek

Locale: English
Product name: Omnipeek

Introduction
About Omnipeek
Omnipeek as a Portable Analyzer
Omnipeek with Distributed Capture Engines
Network Forensics
Voice and Video over IP Analysis
Compass Dashboard
Multi-segment Analysis
System Requirements
Supported Adapters
Installing Omnipeek
Renewing or Upgrading Subscription Versions of Omnipeek
Installing a Capture Engine
Main Program Window and Start Page
Commonly Used Terms
Using Capture Engines with Omnipeek
Displaying the Capture Engines Window
Connecting to a Capture Engine
Organizing Capture Engines by Groups
Discovering Capture Engines
The Capture Engines Window Tabs
Configuring and Updating Capture Engine Settings
Configuring a Capture Engine
Updating Software and Settings
The Capture Window
Creating an Omnipeek Capture Window
Creating a Capture Engine Capture Window
Navigating a Capture Window
Configuring Capture Options
Configuring General Options
Configuring Adapter Options
Capture Window Views
Opening Saved Capture Files
Omnipeek Capture Files
Capture Engine Capture Files
Overview Graph for Capture Files
Working in the Files View
Splitting Saved Packet Files
Merging Saved Packet Files
Using Capture Templates
Forensics Capture on a Capture Engine
Monitoring Capture on a Capture Engine
Dashboards
Timeline Dashboard
Network Dashboard
Applications Dashboard
Voice & Video Dashboard
Compass Dashboard
Network Utilization Graph
Data Source Widgets
Compass Dashboard Viewing Tips
Compass Dashboard Limitations
Select Related Packets
Viewing and Decoding Packets
Capturing Packets into a Capture Window
Viewing Captured Packets
Applying Decryption in the Packets View
Applying SSL Decryption to Packets
Saving Captured Packets
Printing Packet Lists and Packet Decode Windows
Decoding Packets
Showing Data Offsets and Mask Information
Choosing a Decoder
Applying Decryption from the Packet Decode Window
Decode Reassembled PDU
Adding Notes to Packets
Viewing Packet Notes
Creating and Using Filters
Viewing Filters
Display Filters
Enabling a Filter
Enabling Filters from the Capture Options Dialog
Enabling Filters from the Capture Window
Creating Filters with the Make Filter Command
Creating a Simple Filter
Creating an Advanced Filter
Creating a New Capture Window Based on a Filter
Filter Types
Creating Filters Using the Filter Bar
Filter Bar Syntax
Editing Filters
Duplicating Filters
Saving and Loading Filters
Post-capture Analysis
Saving Packets
Copying Selected Packets to a New Window
Hiding and Unhiding Packets
Selecting Related Packets
Label Selected Packets
Finding Strings in Packets
Selecting Packets Matching User-defined Criteria
Forensic Search from the Files Tab
Forensic Search from the Forensics Tab
Forensic Search from the ‘Forensics Capture’ Window
Using the Distributed Forensic Search Wizard
Expert Analysis
Expert Views and Tabs
Configuring Expert views
Expert EventFinder
Flow Visualizer
Packets Tab
Payload Tab
Graphs Tab
What If Tab
Compare Tab
Summary Tab
Network policy settings
Multi-Segment Analysis
MSA Project Window
Flow List
Flow map
Ladder
Creating an MSA Project
Using the MSA Wizard
Create a New Multi-segment Analysis Project
Time Range & Filter
Engines
Capture Sessions
Progress
Segments
Edit Segment
Project file
MSA project analysis options
Web Analysis
Web View Window
Timing Column
Web Upper Pane Views
Web Lower Pane Tabs
Contents Tab
Timing Tab
Configuring Web Views
Web Save Functions
Voice & Video Analysis
Voice & Video View Window
Voice & Video Upper Pane Views
Voice & Video Lower Pane Tabs
Calls and Media Options
Voice & Video Flow Visualizer
Saving Voice and Video Statistics
Playing Calls or Media as Audio
Saving Calls or Media as Audio WAV Files
Selecting Voice and Video Related Packets
Making a Voice or Video Filter
Configuring Options in Voice & Video Views
Summary Voice and Video Statistics
Displaying and Reporting Statistics
Viewing Capture Window Statistics
Configuring Statistics Displays
Saving Statistics Output
Summary Statistics
Nodes Statistics
Protocols Statistics
Hierarchy View of Protocols
Flat View of Protocols
ProtoSpecs™
Viewing Details for a Protocol
Protocol Translations
Applications Statistics
Countries Statistics
WLAN Statistics
Channel Statistics
Signal Statistics
Generating Statistics Output Reports
Viewing Statistics Output Reports
Using the Peer Map
The Peer Map View
Parts of the Peer Map
Configuration Tab
Node Visibilities Tab
Profiles Tab
Peer Map Options
Displaying Relevant Nodes and Traffic
Creating Graphs
Omnipeek Capture Statistics Graphs
Omnipeek Capture Window Graphs
Capture Engine Statistics Graphs
Capture Engine Graphs Capture options
Capture Engine Capture Window Graphs
Capture Engine Graph Templates
Configuring and Saving Graphs
Setting Alarms and Triggers
Capture Engine Alarms
Creating and Editing Capture Engine Alarms
Setting Triggers
Setting Start and Stop Triggers on a Capture Engine
Sending Notifications
Configuring Notifications
Creating a Notification Action
Using the Name Table
Adding Entries to the Name Table
Adding and Editing Name Table Entries Manually
Adding Names from Other Windows
Omnipeek Name Resolution
Loading and Saving Name Table Data
Using the Capture Engine Trust Table
Viewing Logs and Events
Omnipeek Global Log
Capture Engine Global Events
Omnipeek Capture Events
Capture Engine Capture Events
Capture Engine Audit Log
Applying Analysis Modules
Enabling and Configuring Analysis Modules
Installed Analysis Modules
Configuring Options
Configuring Display Format Options
Configuring Color Options
Customizing the Tools Menu
Optimizing Capture Performance
Capturing Data for Wireless Analysis
Configuring Wireless Channels and Encryption
Edit Scanning Options
Edit Key Sets
Troubleshooting WLAN
Optimizing Wireless Analysis
Roaming Latency Analysis
Configuring Capture Adapters
Configuring Hardware Profiles
Omnipeek Remote Assistant
Generating an ORA Management File
Generating Encrypted Capture Files
Opening an Encrypted Capture File
Importing an ORA Management File
Exporting ORA Management File
Global Positioning System
Enabling GPS
Starting the LiveAction GPS Daemon from the System Tray
GPS Columns in the Packets View
Menus and Keyboard Shortcuts
File Menu
Edit Menu
View Menu
Capture Menu
Tools Menu
Window Menu
Help Menu
Reference
Packet List Columns
Expert View Columns
Expert Clients/Servers, Flows and Application View Columns
Expert event log columns
Expert Node Details Tab Rows and Columns
Flow Visualizer Packets Tab Columns
Flow Visualizer TCP Trace Graph Flags
Web View Columns
Voice & Video View Columns
Voice & Video Flow Visualizer Columns
Files View Columns
Nodes Statistics Columns
Applications Statistics Columns
WLAN Statistics Columns
Channel Statistics Columns
Capture Engine Capture Tab Columns
Capture Engine Files Tab Columns
Capture Engine Details Tab Columns
Omnipeek Installed Components
Analysis Modules
802.11 Analysis
Access Point Capture Adapter
Aggregator/Roaming Adapter
Checksums Analysis
Compass Analysis
Duplicate Address
Email Analysis
FTP Analysis
ICMP Analysis
IP Analysis
Modbus Analysis
MPLS/VLAN Analysis
NCP Analysis
PPP Analysis
RADIUS Analysis
SCTP Analysis
SMB Analysis
SQL Analysis
SUM Analysis
tcpdump Capture Adapter
Telnet Analysis
VoIP Analysis
Web Analysis
Expert Events
VoIP
Wireless
Network Policy
Client/Server
Application
Session
Transport
Network
Data Link
Physical
Real-World Security Investigations
Investigation #1: Tracing the course of a server attack
Investigation #2: Ensuring compliance with security regulations and catching leaked data
Investigation #3: Transaction verification for an online gaming company
Investigation #4: Transaction verification for a merchant services company
Security best practices

Back to home page