2. Packets.
When you opened a captured file in AthTek NetWalk, you will see a new tab named “Packets” created on left. Real-time traffic analysis doesn’t support Packets tab. In Packets tab, network administrators can read all the communication details including requested IP addresses, ports, protocol, etc. If a common packet analyzer enables network administrator to see a naked data, AthTek NetWalk enables users to see a reliable anatomical traffic data through detail and hex view tool.

3. Layered View.
There are 3 layers in Layered View section: Application, Net&Transport and Physical. A significant different is, you can see communication flows in postmortem packet analysis.

4. Events Tab.
In Events tab, network administrator can jump to the communication flow when it is a postmortem packet analysis.

5. Matrix Map.
In Matrix Map, real-time analysis only marks active connections in green, while postmortem analysis marks all successful connections in green.

In short, postmortem analysis enables network administrators to see all communication details happened on the network. All you need to do is to capture packets and open the captured file in AthTek NetWalk.

Buy AthTek NetWalk Enterprise License in Special Offer

AthTek NetWalk is a super network analyzer for network administrators. It monitors the real-time data traffic on the network, and leads them to the professional analyzer to generate network traffic analyzing charts. Multi-protocols enables you to know every detail about your network within different layers, including Application Layer, Transport Layer and Physical Layer. It is good at packet sniffing and enables to analyze the real-time packet by built-in Wireshark. All the captured traffic data can be saved as trace files for further use. And by using the Matrix Map, you can see all the connections directly.

For more network analysis details, please click to access the second tab– Layered View. In this tab you can see the detailed network monitoring data in Application, Net&Transport and Physical layers. All the internet requests will be disclosed completely and displayed in groups.

Click to access the third tab and you will see all the events happened during network monitoring. Blue ball stands for TCP Connection Slow Setup. Yellow ball stands for TCP Out of Order. Orange ball stands for TCP Retransmission. Red ball stands for TCP Important Errors. Right click on any of the records, and then network administrator can jump to the Net&Transport layer for troubleshooting.

Click on the fourth tab and you can see the real-time matrix map of your network. You can choose to display the Matrix Map on IP/Domain or MAC address basis. Green line stands for real-time activate connection and blue line stands for historical connection. Like in Events tab, double click on any of the addresses network administrator can jump to the Net&Transport layer for troubleshooting.

Click on the last tab, you will see the real-time traffic in dynamic area chart, curve chart, bar chart or pie chart.

1. How to delete the component?
Click the drop-down arrow and you will see the delete option. For example, you want to delete the option of Top IP Hosts. You can click the drop-down arrow of Top IP Hosts component and choose Delete option, and then the component will be deleted from monitor interface. Particularly, you can also switch the graph from pie chart to host list.

2. How to add a new component to monitor interface?
Click “Add” on top right of monitor interface and then you will see the “Add Component” window. There are 8 types of components which you can add to the monitor interface. If you choose to add a graph, you will be asked to choose a graph type from 9 graph types. For example, you want to add a Monitor Packet Trend to 2nd row and 2nd column. Click “Add” on top right corner and choose Monitor Packet Trend in type, choose 2 in row and column. Press OK to add.

3. What components can you add to the monitor interface?

Go to monitor-tool.com to Get $200 Off Discount Now!

AthTek NetWalk is a comprehensive network monitoring tool which can be used as intrusion detection system (NIDS) for business networking. It captures packets and achieves high performance in packet sniffing. AthTek NetWalk learns from many pop packet sniffing tool, and optimized the way of network monitoring. It takes the entire network traffic under control, and generate the network status report by visible diagrams.

There are a lot of small business who highly depend on network, but they cannot afford the high prices of other packet sniffers. AthTek NetWalk is a better choice which has higher packet sniffing performance but low cost. You can view the compare of packet sniffers and network monitoring tools at HERE.

AthTek NetWalk Enterprise Edition is a comprehensive network monitor which can detect, diagnose and resolve network performance problems safely. It doesn’t like many other network monitor tool, AthTek NetWalk has a graphical interface which is integration of various network monitoring reports. You can find many key items in network management in the interface. All these diagrams are flexible and customizable. With this detailed network traffic report, you can easily know the traffic status of your network. In one word, AthTek NetWalk Enterprise Edition is exactly the software for business owners to detect, diagnose and resolve network performance problems. It will guarantee the income and the brand promotion.

With AthTek NetWalk Enterprise Edition, you can provide a stable web service to your customers and employees. Besides, we also prepared some Christmas gifts for you. The first Christmas gift is, you can get AthTek NetWalk Enterprise Edition with a $200 OFF price in our holiday deals 2014. It’s our final special offer in 2013. The second Christmas gift is, you can get at least a $40 Amazon gift card in our holiday deals 2014. And as always, Merry Christmas and Happy New Year!

First of all, you need to add the host to AthTek NetWalk. Open AthTek NetWalk and go to Tools – > Options… -> Sites, you will see a list of hosts under monitoring. Simply click Add to add new host to the list, and you would be able to view the bandwidth utilization graph for this host in [Layered View] -> [Net&Transport].

You can add multiple hosts to AthTek NetWalk and generate the bandwidth utilization graph in different kinds of charts. If it was a postmortem analysis of captured packets, you can even view the conversation contents in traffic flows and active hosts in matrix map.

Matrix Map

AthTek NetWalk is a specialist that can help Network administrators to monitor and manage the Network. Once ARP attacks happen to the network, AthTek NetWalk provides services which can locate ARP source rapidly and reliably, thus ensuring normal network operations.

By monitoring every event through the network or analyzing packets captured experienced administrators can Diagnosis the problem.

However AthTek NetWalk can help you do that with its intelligent analyzing systems.

Different marks mean the different severity of events.

There are some suggestions of mine about troubleshooting.

Firstly，pay special attention to the value of ARP Request and ARP Response which should be above 1:1generally.

Also the Physical Endpoints we can view from AthTek NetWalk will show the correlation of MAC address and IP address. Most of the conditions one MAC address shall have only one IP address corresponding to .If one MAC address has multiple IP addresses to, there are several conditions such as the host with the MAC address is the gateway Or ARP attack. And through AthTek NetWalk, we can locate ARP attack.

AthTek NetWalk can draw a matrix which will show the information between those hosts in the network in that people will be able to identify doubtful conditions as quick as possible.

[PDF] Through the filter which can change the scope of capturing packet data, we can capture only the specific packets we need. So users should focus on the data which causes a network failure or comes from network attacks, rather than analyze all the large amounts of data. In terms of capturing packets AthTek NetWalk is one of the most professional tool which provide filer completely thus reducing workload and improving efficiency.

This Tutorial is based on AthTek NetWalk Enterprise Edition.

The next steps are significant.

• First run AthTek NetWalk and click “Captures”
• Before you starting to capture package，you need to choose the filter which was created in the past. Actually, AthTek NetWalk had preset some filters already.
• If you need to create your special filter, what you should be clear is the mean it works. AthTek NetWalk can filter the data mainly by IP addresses, Ports and protocols and if you want to know more details about further settings, please read the following tutorials.
• Click “and” button and choose “Address Rules” in the drop-down menu you can specify IP address and the direction of transfer. Here we assume that address 1 is 192.168.1.1, address 2 is arbitrary and both directions for example.
• You can also choose Port rules and protocol rules and specify them to meet your demand.
• When you have finished your filter, you can go back to the first step and click “Captures”!

Tips: If you are facing with problems much more complex than the situation that I took for example, you need to read my next article for more details about the combination of different simple filters.

If you are a network administrator of a large company, you should probably know AthTek NetWalk. It is one of the most great network monitoring tools in the world. In 2011, AthTek NetWalk was awarded as The Best Windows Application of Year 2011 with its excellent graphic interface and packet sniffing features. 2 years later, AthTek NetWalk has been included into SLAC’s Network Monitoring Tools directory. This means AthTek NetWalk is recommended by website editors, famous institutes, great financial organizations and definitely our customers. If you are looking for a quality packet sniffer and analyzer, AthTek NetWalk would be the best choice for you work!