Wireshark Enhancements:
Cascade Pilot Personal Edition

• Quickly open, drill down and analyze multi-gigabyte trace files
• Easily isolate and identify traffic of interest through an extensive collection of network analysis metrics called "views"
• Visualize long-duration live and off-line traffic statistics by moving back in time through large data sets with just a few mouse clicks
• Apply compatible views to 50GB and larger trace files in a matter of seconds using trend indices
• Baseline and monitor long-duration network traffic with a flexible trigger-alerting mechanism called "watches"
• Create professional reports in a variety of formats directly from your custom views
• Take advantage of Wireshark’s capture and display filters and expansive dissector library for deep packet analysis from within Cascade Pilot user interface

• Accelerates problem identification, diagnosis and time-to-resolution
• Simplifies troubleshooting through tight integration and seamless hand- off to Wireshark
• Approaches data through different and varied convergence points for rapid investigative exercises
• Opens very large packet traces in seconds rather than minutes (or longer)
• Takes advantage of the network staff’s expertise with Wireshark without having to learn yet another approach

• 802.11 WLAN Troubleshooting (discovery, bandwidth, channel usage, retransmissions, signal and noise)
• LAN and Network Troubleshooting (MAC, VLAN, ARP, ICMP, DHCP, and DNS)
• Bandwidth Usage (microbursts, IP, TCP, Web, and VoIP)
• Talkers and Conversations (IP, subnets, countries, TCP, Web, VoIP, database, financial)
• Performance and Errors (IP, TCP, Web, VoIP, database, financial)
• User Activity (Web, VoIP, database, financial)

Charts: Cascade Pilot Personal Edition includes a complete collection of interactive charts including bar, pie, and strip charts, conversation rings, scatter diagrams and grids for displaying information in the way it makes sense to you. An intuitive point-and-click process makes it easy to select elements within a chart, such as bars within a bar chart or time intervals within a strip chart, to refine your analysis.

Multi-Level Drill-Down: Drill-down is one of the most powerful and unique features in Cascade Pilot Personal Edition. Drill-down occurs when you apply a view to a source which itself is the result of a selection made within a previously-instantiated view. This powerful paradigm allows you to quickly hone in on the specific packets needed to isolate anomalous network behavior, enabling very large trace files to be analyzed quickly and easily.

Time Control: Viewing long duration network traffic metrics computed over days, weeks, and months can be challenging. With Cascade Pilot Personal Edition’s “back-in-time” capability, users can easily move through view metrics over extended periods of time with just a few mouse clicks. Based on the selected time interval, sub-sampling and data aggregation techniques are used to optimize the granularity of the visual presentation of view metrics. The back-in-time capability can be applied to live and off-line traffic metrics.

Watches: Watches are a sophisticated triggering and alerting technology that can be created on virtually any view metric. When a trigger condition is met – for example, high bandwidth, slow server response time, high TCP round-trip time – an action is then executed. Actions include event logging, sending an email alert, and initiating a packet capture.

Reporting: Cascade Pilot Personal Edition offers an enhanced set of reporting capabilities that integrate fully with views, enabling the user to create professional reports from what you see on the screen. Reports can be created in a variety of formats including PDF, Word and Excel.

Wireless Support: Cascade Pilot Personal Edition offers unparalleled functionality and versatility when applied to wireless networks through a comprehensive set of 802.11 views that can be applied directly to 802.11 wireless sources. Thanks to the integration with Riverbed AirPcap adapters, Cascade Pilot Personal Edition offers full multi-channel packet capture from a laptop-based system. With AirPcap Nx, Cascade Pilot Personal Edition can speed up the decryption of WPA and WPA2 (pre-shared key) 802.11 frames as well.

Cascade Pilot Personal Edition provides an interactive and visually-oriented user interface.

Monitoring VoIP is easy with Cascade Pilot. Send a conversation to Wireshark for replay with a right mouse click.

Create instantaneous, professional reports from on-screen displays to easily inform management and colleagues of network conditions and health.

Drag views onto a trace file to narrow the analysis. This Geo IP Response Time view lets the user see the fastest and slowest responding servers by country.

Cascade Pilot Personal Edition deployed with 3 AirPcap adapters locked on to separate channels displaying bandwidth over time.