Capturing Data and Managing Sessions#

Network Analyzer can display one or more network capture sessions. Each capture session displays the transaction and event data captured from one or more nodes. The captured data is shown in editor panes. In general, Network Analyzer captures all incoming and outgoing packet data via the selected adapters, regardless of whether the host nodes have sniffer applications. The captured data includes failed transmissions, as well as debug messages from node applications that are compiled in debug mode.

This kind of capture is called a perfect trace session. The capture nodes of a perfect trace session are not sniffers but nodes that might be running your own application that you are trying to debug. The perfect trace session compiles all incoming and outgoing data from each node in chronological real time, providing a richly-layered display of all activity within a network. A perfect trace session can be especially useful for debugging a network in development as it allows you to see every packet on the network.

Network Analyzer supports two types of capture sessions:

  • Live sessions display data as it is captured. The display is continuously refreshed as new data arrives. When a live session starts, it is unnamed and its data is maintained in temporary storage until you save it to a named file. Network Analyzer can capture live session data from multiple sets of adapters into the same session. You cannot, however, capture from one adapter into different sessions at the same time. You can run more than one live session at the same time.

  • Saved sessions contain captured data that has been saved to permanent storage in a named .isd file. You can load a saved session and analyze it at any time.

Network Analyzer displays each session in an editor with its own tab. The tab of each saved session is labeled with the session's file name; the first live session is labeled Live, the second Live1, the third Live2, and so on.

You can capture data from the node of any connected Debug Adapter, from one node at a time or multiple nodes simultaneously. You can also capture all network traffic over the current channel by capturing data from a connected sniffer node.

Note: The types of data captured from a node depend primarily on the software protocol running on the node, and also the capabilities of the node's radio chip and Debug Adapter.

Starting a Capture#

Before starting a capture, open Window > Preferences > Network Analyzer > Decoding > Stack Versions and make sure that the protocol running on the adapters is selected. If you are working in a multiprotocol environment, select 'Auto-detecting decoder stack'. A change here will not affect any active capture sessions but will apply to the next capture you start.

To start a capture:

  1. Create a capture interface with Simplicity Device Manager or with Network Analyzer.

  2. Right-click the selected capture interface.

  3. On the context menu, select Start Capture.

capture menucapture menu

Alternatively, left-click the Play button on the right of the capture interface.

Alternatively, select File > New > Quick Capture... and select the desired capture interface.

Alternatively, select File > New > New Live Capture Session. This creates a new live capture session and puts it on top of the editor list.

When you start a capture on an capture interface, the live session used for the capture is assigned in one of the following ways:

  • If no live sessions are currently active, a new live session is created and used.

  • If live sessions are active, but they are not on top of the editor stack (for example, another file is opened and currently on top), a new live session is created and used.

  • If a live session is active and it is also on top of the editor stack, then this session will be used for capture.

Stopping a Capture#

  1. Select one capture interface.

  2. Right-click the selected capture interface.

  3. On the context menu, select Stop Capture.

To resume capture, select Start Capture.

Alternatively, left-click on the Stop button on the right side of the selected capture interface.

Pausing a Capture#

Pause a capture at any time by clicking Pause button on the right side of the selected capture interface or the toolbar. This is a convenient way to stop capturing from a device or devices without having to start a new capture at a later time. Events that occur during the pause are lost, and cannot be retrieved.

Clearing Session Events#

Click Clear Events on the Network Analyzer menu or toolbar to purge all events and their associated transactions from the current session. Caution! You cannot retrieve cleared events.

This is mostly used if you are working on a scenario on an embedded node, where you control some activity through command-line actions. You then simply "Clear" events between each retry, instead of having to do a complete "Start Capture / Stop Capture".

Note: Network Analyzer is designed to stay connected and continue capturing, even when the firmware on the target node is uploaded and the node resets. That does not stop the capture session.

Saving a Session#

When you start a capture, it is initially written to an unnamed live session. At any point during a live session, you can save the data thus far captured to a file by selecting File > Save. After you save a session file, Network Analyzer continues to append capture data to it; however, you must save again in order to retain this data in the session file.

Network Analyzer saves session data to an .isd file, which is a compressed file that stores session data and the network state. Network state includes display settings such as map modifications, which Network Analyzer restores when you reload the session file.

Network Analyzer closes a saved session from further captures after you explicitly stop the capture, or when you start another live session. After a saved session is closed, it cannot be reopened to capture more data.

If you modify a saved session file - for example, set bookmarks or reposition icons in the Map pane - Network Analyzer asks whether to save or discard those changes before you close the session.

Note: For security reasons, Security Keys that you may use to decrypt captured data are not included in saved .isd files by default. If you wish to share security keys with your files, you should turn on the option "Save decryption keys in Network Analyzer files" on the Security Keys preference page, which you can access by selecting Window > Preferences > Network Analyzer > Decoding > Security Keys.

Saving Multiple Sessions#

If multiple open capture sessions have unsaved data, you can save all of them at once by selecting File > Save All.

Exporting to Other File Formats#

To export a capture session to another file format:

  1. Select File > Network Analyzer Export or click the toolbar Network Analyzer Export control.

  2. Select the export format.

  3. Name the output file.

  4. Click Save.

Extracting Individual Events#

You can extract specific events from the Transactions pane, Events pane, or Hex Dump pane, and save them into a separate text log file.

To extract specific events to a text file:

  1. Right-click the event in the Transactions, Events, or Hex Dump panes that you want to extract.

  2. On the menu, select Extract to.

  3. Name the output file with a text extension.

  4. Click Save.

Once you specify a file, you can append additional events to it by right-clicking the event that you want to append and selecting Append to <file>.

Open and Close Options#

To open a capture file, select File > Open Recent File or click the toolbar control.

To close a single capture session, close the session tab.

To close all capture sessions, right-click any session tab and select Close All, or select File > Close All Editors.

To close all but the current capture session, right-click its session tab and select Close Others.

Replaying a Session#

(Rarely used) Replay events of the current session, whether live or saved, by selecting Start Replay on the Network Analyzer menu or the toolbar. Network Analyzer replays the session from the selected event at a constant speed. Replaying events in a live session has no effect on the capture in progress.

Once replay has started, both the toolbar control and the menu selection convert to a Stop Replay function.