What's new in Colasoft Capsa Enterprise 13.0.1 Build 13110

Aug 9, 2020
  • New Features:
  • Internet IP device identification feature is added.
  • Replay analysis supports wireless packets decryption.
  • Users can locate related conversations from the Diagnosis Details tab.
  • Improvements:
  • Packets can be exported in libpcap-nanosecond type.
  • Analysis Profile and Network Profile are merged to be Analysis Settings.
  • Analysis settings are independent per project.
  • Users can configure whether to stop analyzing when available memory is less than a specified threshold.
  • Users can view traffic logs on lower panes.
  • In DPI filter mode, conversation views support script-based display filters.
  • Reconstructed files will be saved in one file folder every 1,000 conversations.
  • Format-supported trace files can be replayed without file extension.
  • Bugs Fixed:
  • Email analysis for some IMAP4 conversations may cause Capsa locked.
  • HTTP logs cannot be exported automatically.
  • VoIP analysis may cause crash.
  • DPI filter with specific rules doesn't take effect.
  • Copying or exporting the hex data on Hex view of data Flow tab may cause Capsa to crash.
  • IP addresses may be grouped wrongly.
  • Routing Loop and Physical Loop events of Diagnosis settings are displayed as unchecked even though they have been checked.

New in Colasoft Capsa Enterprise 11.1.1 Build 11120 (Apr 25, 2018)

  • New Features:
  • The function of packet file selection is added to the file list box that used to playback packet files.
  • Packet storage filters is provided.
  • Exporting the file according to the selected session is available.
  • The function of import and export is added to the advanced filter of the packets view.
  • Improvements:
  • The IP address library is updated.
  • The log view is sorted by packet timestamps.
  • Session ordering is sorted by time by default.
  • The function of packet compulsive decoding is optimized.

New in Colasoft Capsa Enterprise 11.0.0 Build 11033 (Feb 13, 2018)

  • New Features:
  • IPv6 packet analysis is provided.
  • Endpoint analysis and conversation analysis based on IPv6 is provided.
  • Files transmitted over HTTP protocol can be reconstructed, including HTML files, images, CSS, JS, EXE, etc.
  • Files transmitted over FTP protocol can be reconstructed.
  • SSL certificates can be reconstructed.
  • RTP flow can be analyzed when signaling packets are not captured.
  • An SSL Log sub-view is added to the Log view.
  • An X-Forwarded-For field is added to the HTTP Log view.
  • Improvements:
  • Capsa can remember the file path for last replay.
  • A "Path" column is added to the Replay tab to display the path of the packet file.
  • Bug Fixed:
  • Sometimes, the event Duplicated Acknowledgement was misjudged.

New in Colasoft Capsa Enterprise 10.0.0 Build 10033 (Jul 27, 2017)

  • New Features:
  • An Interaction Diagram column and a Transport Layer Max ACK Time column are added for TCP Conversation view.
  • A Payload column is added for TCP Conversation view and Packet view.
  • Audio and video can be played for SIP VoIP calls based on following codecs: G.711/a, g.711/u, GSM, BV32, Speex, PCM, H.264 (unencrypted), H.263(unencrypted), Mp4v-es.
  • Audio and video can be played for H.323 VoIP calls based on following codecs: G.711/a, g.711/u, GSM, H.264(unencrypted), H.263 (unencrypted).
  • Improvements:
  • VoIP analysis is improved to support both SIP and H.323 protocol.
  • MAC address library and IP address library have been updated.
  • The calculation for TCP conversation metrics has been updated.
  • Average bps, average utilization, and average pps are added for traffic statistics.
  • Packet timestamp supports nanosecond, and some statistics are accurate to nanosecond.
  • Bugs Fixed:
  • Capsa crashes when the Packet Decoding pane is minimized to zero.
  • The packet is identified as retransmission when the previous packet sequence number reaches the 32-bit integer limit.
  • Capsa sometimes hangs on the initializing page when starting a project.
  • Capsa sometimes crashes when saving the statistics on the Diagnosis view.
  • Network adapters occasionally cannot be detected on Windows 10.

New in Colasoft Capsa Enterprise 9.2.0 Build 9259 (Jan 19, 2017)

  • New Features:
  • HTTPS packets can be decrypted with key files.
  • Application based traffic analysis and statistics are available.
  • An Application view and an Application Explorer are provided.
  • More than 1800 built-in applications are provided.
  • Custom applications are available.
  • A Base64 Codec is provided.
  • Improvements:
  • A Bearer Protocol column is added for port statistics.
  • A Dup Ack mark is added to the Summary column on the Packet view.
  • The display of top charts is optimized.
  • The display on HiDPI screen is optimized.
  • IP address conflict detection is optimized.
  • Bugs Fixed:
  • The Find box cannot be called out from the Node Explorer.
  • Packets cannot be located for a specific diagnosis event on the Diagnosis view.

New in Colasoft Capsa Enterprise 9.1.0 Build 9130 (Sep 6, 2016)

  • New Features:
  • Conversation filter is provided to define filter rules for MAC/IP/TCP/UDP conversation.
  • Packets can be decoded as specified protocol.
  • Packets can be filtered based on time rule.
  • Enable batch address/port input for advanced capture filter.
  • A Time Sequence tab is added for DNS-based conversation.
  • The protocol PPP for POS can be recognized and decoded.
  • Improvements:
  • Name table file supports .csv format.
  • An option is added to enable/disable the automatic loading of packet files replayed last time.

New in Colasoft Capsa Enterprise 9.0.0 Build 9034 (Jun 21, 2016)

  • New Features:
  • Network traffic can be analyzed based on local processes.
  • A Process view and a Process Explorer are provided.
  • Improvements:
  • bps calculation is optimized.
  • The quantity of the nodes displayed on the Node Explorer is not limited anymore.
  • View display is optimized.
  • Conversation data display is optimized.
  • IP address geographical information library is updated for Colasoft Ping Tool.
  • User interface display is optimized for Colasoft Ping Tool.
  • MAC address manufacturer information is updated for Colasoft MAC Scanner.
  • Bugs Fixed:
  • Chart cannot be saved sometimes for Colasoft Ping Tool.

New in Colasoft Capsa Enterprise 8.3.0 Build 8304 (Mar 29, 2016)

  • New Features:
  • The recognition of some protocols is more accurate.
  • Improvements:
  • The Windows 10 operating system logs off from time to time when starting Capsa.
  • Added name table cannot be auto-saved.
  • Packet files with capitalized extension cannot be replayed.
  • Log View settings in Analysis Profile cannot be auto-saved.
  • For wireless analysis, no packets are shown on the Packet view when a MAC address is selected in the Node Explorer.

New in Colasoft Capsa Enterprise 8.2.0 Build 8187 (Feb 24, 2016)

  • New Features:
  • Support analyzing the traffic of 2-channel wireless AP.
  • Support displaying decoded data in hex in Data Flow sub-view in TCP Conversation view and UDP Conversation view.
  • Improvements:
  • Optimize the display of Data Flow sub-view in TCP Conversation view and UDP Conversation view.
  • Support recognizing 1546 protocols and sub-protocols.

New in Colasoft Capsa Enterprise 8.1.0 Build 8151 (Dec 15, 2015)

  • New Features:
  • Add online auto-update feature.
  • Add conversation filter.
  • Add signature recognization of DNS packets.
  • Improvements:
  • Optimize the interface of TCP Flow Analysis.
  • Optimize system architecture, upgrade from 32-bit to 64-bit version.
  • A maximum of 100,000 analysis objects are supported in 64-bit version. Packet buffer size can be set as the total idle RAM of the system.
  • Analysis performance is improved greatly.
  • Add field sorting capability in the Log view.
  • Support recognizing 1040 protocols and sub-protocols, support decoding 142 protocols.
  • Bugs Fixed:
  • Fix the problem of command line calling error.

New in Colasoft Capsa Enterprise 8.0.0 Build 5083 (Jun 18, 2015)

  • New Features:
  • The third-generation Colasoft Traffic Recognition Engine (CSTRE) provides more accurate protocol and application recognition.
  • Add IP fragment packet decoding capability.
  • Add HTTPS stream reassembly decoding capability.
  • Support auto-resolution of domain name and host name.
  • Protocol decoding content can be exported.
  • Add two diagnosis events: physical loop and routing loop.
  • MAC/IP/TCP/UDP Conversation View can be located directly from Packet View.
  • Add packet time shift function to Packet View.
  • Support chunked encoding reassembly and gzip compression decoding in HTTPS stream reassembly content.
  • Colorizing the packets for a conversation in MAC/IP/TCP/UDP Conversation View.
  • Support running Capsa with command lines.
  • 83 new protocols supported: NJACK,6LoWPAN,Adwin-Config,PEEKREMOTE,Etch,AppleMIDI,AR Drone,ACN,ARTNET,BSSGP,TUXEDO,BFD Control,Bitcoin,BT DHT,XCSL,Auto_RP,CWLCCP,Clique-rm,CTDB,CIGI,DPLAY,DCC,DVB-S2,E100,DCP(ETSI),XMCP,GIOP,GPRS,HiSLIP,IEC MMS,IEEE_1588,iFCP,Interlink,ICEP,Kismet,LANforge,LBMR,LAPD,PKTGEN,LBT-RM,LBT-RU,MAC-LTE,MSRP,MS SGSN LLC,Mojito,NORM,NBD,OSC,openflow,PVFS,Pathport,PDCP-LTE,IEEE_1588_PCSP,PANA,RLC,RTPS,RedbackLI,RLM,RMCP,RPCAP,RELOAD,RLC-LTE,SERCOSIII,SAP 822,SPRT,H1,SKTP,Spice,StarTeam,SDCP,Teredo,UDT,UCP,UMA_M,MIOP,BT-uTP,VNC,WOL,waveagent,MQ,WLCCP,YMSG and ZIOP.
  • Improvements:
  • Address Resolution Options is added.
  • Network Profile is enabled by default when creating a project.
  • Bugs Fixed:
  • TCP data reassembly display is not accurate.
  • Crash caused by repeated clicks of Replay button after packet replay storage space is full.

New in Colasoft Capsa Enterprise 7.8.0 Build 4854 (Aug 26, 2014)

  • New Features:
  • Adds VoIP analysis, including VoIP analysis profile, call statistics, VoIP dashboard, diagnosis, logs, reports, and VoIP Explorer.
  • Domain based statistics is available.
  • Advanced display filter for packets.
  • Port based statistics is available
  • IMAP4 based emails can be analyzed.
  • Windows Server 2012 support (except for Colasoft Packet Builder).
  • Improvements:
  • The Packet tab for the TCP Conversation view is optimized to be identical to the Packet view.
  • The color scheme for TCP Transaction Summary Pie Chart is improved.
  • Dashboard is optimized to provide more default graphs.
  • Several built-in reports are added to the Report view.
  • Default Packet Buffer is increased to 128 MB.

New in Colasoft Capsa Enterprise 7.7.2 Build 4044 (Jun 17, 2013)

  • New Features:
  • Adds the identification and decoding of the protocols: SIP, SDP, MEGACO/H.248, MGCP, Q931, SAP, H.225, RMI, Oracle, MMS, GOOSE, SMV, and GMRP.
  • Alarm notification now by both audio and email.
  • Added Custom Reporting capability for individual nodes within the Node Explorer.
  • Bug Fixed:
  • The Analysis Profile Settings dialog box could not be closed when a scheduled project was running.
  • Restored the manufacturer information for the Colasoft MAC Scanner.
  • Resolved Checksum Error in the Summary column on the Packet view when decoding UDP protocol under IPv6.
  • Eliminated program crash during packet file replay.
  • No packets were captured when a capture using multiple NICs was stopped and restarted again.

New in Colasoft Capsa Enterprise 7.6.1 Build 2886 (Jun 21, 2012)

  • New Features:
  • You can now schedule task to automatically start a new analysis project at specified time.
  • Configurations of the program can be exported and imported. The configurations include the settings of network profile, analysis profile, dashboard, matrix and report.
  • Display filters are provided for isolating and viewing particular items.
  • You can now add new report with user-defined name and optional statistic items.
  • Packets can be highlighted and noted.
  • Improvements:
  • Logs can be automatically saved in *.csv format.
  • Capsa can now identify encryption type of AP automatically.
  • An MAC address column is added to the Log tab.
  • Settings for analysis profile have been optimized.
  • Local engine settings are merged into Options on the Menu button.
  • Capsa can now decode Tunnel IP in IP protocol.
  • The analysis profile, Protocol Analysis, is removed.
  • Bug Fixed:
  • The layout of columns, including column arrangement and column width, cannot be memorized.
  • The Find dialog box cannot remember the search content typed last time.

New in Colasoft Capsa Enterprise 7.5.2 Build 2841 (Oct 27, 2011)

  • New Features:
  • Powerful TCP flow analysis for application performance optimization.
  • Add ICQ monitor to analyze and log ICQ activities.
  • Support RADIUS protocol analysis.
  • Intuitive TCP transaction sequence diagram.
  • Enhanced user interface & performance.
  • Improvements:
  • The layout of Tab view has been optimized, and the computer resource usage is reduced significantly.
  • Bugs Fixed:
  • The log view statistics are inaccurrately retrieved and displayed sometimes.
  • Occasionally, the program keeps reactivating after a couple of days running.
  • Reports can not dispaly properly sometimes.
  • Bugs in ICMPv4 module.
  • when a project file is replayed, the size of cscproj project file can be automatically changed.
  • Random failure to export a report to PDF.

New in Colasoft Capsa Enterprise 7.4.1 Build 2586 (Mar 16, 2011)

  • New Features:
  • Complete support for wireless traffic capture and analysis from all 802.11 a/b/g/n networks.
  • Decryption of WEP/WPA/WPA2 protected packets.
  • Improvements:
  • Redesigned Start Page layout:
  • Network Profile panel replaced by new Adapter Status/AP Status panel.
  • Network Profile panel minimized and moved to the Other Settings panel.
  • Optimized network profile settings that a capture can be started without a network profile.
  • New icons for network tools on the Ribbon.
  • Prompt of wireless disconnection when clicking the start button to start a wireless analysis.
  • A replay bug fixed that a certain type of packets cannot be loaded.

New in Colasoft Capsa Enterprise 7.3.1 Build 2391 (Oct 20, 2010)

  • New Features & Improvements:
  • Add Security Analysis Profile to analyze DoS attack, ARP attack and worm activities, etc.
  • Add tab show/hide management panel for the main view.
  • Add Data Storage on the Start Page to configure packet and log save settings.
  • Add Report Logo preview in Report Settings.
  • Add New Packet Storage and Log File Save icon on the Ribbon.
  • Renamed Packet Buffer property page in the Analysis Profile Options to Packet Display Buffer, and the Packet Storage was removed from this page.
  • Redesigned Log Settings property page in the Analysis Profile Options, and add new Export Log Settings to enable/disable log auto saving.
  • Bug fixed:
  • Reactivation required when switching to other user accounts.
  • Customize Protocol function may not apply.
  • NetRay2.0 and Windows Sniffer (*.cap) packet files replaying incompatible.

New in Colasoft Capsa Enterprise 7.2.1 Build 2244 (Jun 18, 2010)

  • New Features & Improvements:
  • Support MSN, Yahoo Messenger monitoring.
  • Support saving email content to hard disk.
  • Support opening project file from Capsa 6.9.
  • Display connection number of each node in the Matrix tab.
  • Bug fixed:
  • The IP address range and mask condition of filter may not work.
  • Cannot change 0 to another number in Analysis Profile Options.
  • No separate check for Windows version of 32/64 bits before network adapter driver registry.
  • Too much time to initiate a project.
  • Wrong Delta Time in Packet tab.

New in Colasoft Capsa Enterprise 7.1.2 Build 2227 (Mar 10, 2010)

  • New Features:
  • Add Duplicate function for Network Profiles and Analysis Profiles in Start Page.
  • Improvements:
  • New Start Page makes it easy to use.
  • Add Local Engine Setting build in System Menu.
  • Editing function of Network Profile and Analysis Profile moved to context menu.
  • Format and Report setting page moved from "System Options" dialog to "Local Engine Setting" dialog.
  • Bug fixed:
  • Cannot add new network group in Network Profile when auto network config detection failed.

New in Colasoft Capsa Enterprise 7.1.1 Build 2222 (Feb 12, 2010)

  • New ribbon style user interface
  • New dashboard
  • New related hosts list in diagnose view
  • Add Network Profile. It is a series of settings for different network environment, which including Network Group, Name Table, Alarm and Network Bandwidth setting
  • Add new analysis profile. Include Full Analysis, Traffic Monitor and various frequently-used protocols analysis
  • Add real-time alarms
  • Add time sequence diagram for TCP conversation. Show both SYN and ACK response of TCP connection
  • Real-time analysis. Set adapters as source of data collection, which provide an intuitive display of traffic
  • Replay analysis. Set archive packet files as source of second time analysis. Support various replay speeds and provide retrospective analysis of historical issues
  • Support customized protocols for Ethernet II, IP, TCP, UDP
  • Support customized graphs
  • Support customized report and export as PDF
  • Enhanced packet filters

New in Colasoft Capsa Enterprise 6.9 R2 Build 1152 (Jul 3, 2009)

  • Support Windows 7 32bit and 64bit Edition.
  • Support replay multiple packet files simultaneously.
  • Alias(or hostname) and address can be displayed simultaneously.
  • Support Windows Server 2008 and X64 Edition

New in Colasoft Capsa Enterprise 6.9 Build 1148 (May 5, 2009)

  • New Features:
  • Globally added two new options: alias(or hostname) and address can be displayed simultaneously.
  • There is a new option in the global Option settings users can enable to prevent hibernation when capturing.
  • New protocol ISL and FCoE can be recognized now.
  • Decoders for ISL, FCoE protocols.
  • Support Windows Server 2008 and X64 Edition.
  • Improved:
  • An online help section activated in Start Page below Quick Link.
  • The Loopback won't be shown in the NIC test wizard.
  • Bug Fixed:
  • A wrong value has been displayed in the decode area for IP Fragment Offset

New in Colasoft Capsa Enterprise 6.9 Build 1146 (Nov 28, 2008)

  • Globally added two new options: alias(or hostname) and address can be displayed simultaneously.
  • There is a new option in the global Option settings users can enable to prevent hibernation when capturing.
  • New protocol ISL and FCoE can be recognized now.
  • Decoders for ISL, FCoE protocols.
  • An online help section activated in Start Page below Quick Link.
  • The Loopback won't be shown in the NIC test wizard.
  • A wrong value has been displayed in the decode area for IP Fragment Offset

New in Colasoft Capsa Enterprise 6.9 Build 1143 (Oct 21, 2008)

  • Globally added two new option: Show Physical address as & Show IP address as.
  • A new option added to prevent hibernation when capturing.
  • Support decoding ISL, FCoE
  • A online help section activated in Start Page below Quick Link.
  • The Loopback won't be shown in the NIC test wizard.
  • A wrong value has been displayed in the decode area for IP Fragment Offset.

New in Colasoft Capsa Enterprise 6.8 Build 1138 (Jul 8, 2008)

  • New Option for "Auto save packet file" in General Settings to specify the length of each packet to be saved.
  • New GEO collum in Endpoint View.
  • New dock window for "Online Resources".
  • New protocols decoder supported: Bittorrent, Emule, MSSQL, TNS.
  • Updated the lib for National IP Address information.
  • Improved the DNS analysis modules.
  • Bug Fixed: When the program is not running, openning unsupported packet file by double click may cause incorrect value under count value in Summary View and Diagnosis view.

New in Colasoft Capsa Enterprise 6.4 build 1083 (Mar 22, 2007)

  • New Features:
  • Supports Windows Vista.
  • Supports Windows XP 64-bit Edition and Windows Server 2003 64-bit Edition (AMD x64 Processor architectures).
  • Improvements:
  • New protocol decoders: Gopher, ICP, SCTP, VRRP.
  • Add "Custom Columns" toolbar button in the Endpoints, Protocols, Conversations, Packets and Logs view .
  • Bug Fixed:
  • Email analyzer: Incorrect email address extracted from certain MIME header.
  • Demo version: Log buffer limitation should be 512KB, the old version limited it to 512 bytes.

New in Colasoft Capsa Enterprise 6.0 (Apr 26, 2006)

  • New: Expert Matrix view shows all communicating endpoints within your network
  • New: Conversations view now supports physical, IP, TCP and UDP conversation
  • New: DNS analysis module provides DNS-specific diagnoses and DNS query log
  • New: Protocol decoders Finger, TFTP, Telnet and SSH
  • New: Protocol identification now supports RIP, RIPV1, RIPV2, RIPV3, RIPV4, QQ, BitTorrent
  • New: Project Explorer: groups Internet address by its geographical location
  • New: Project Explorer: displays the realtime status of each nodes
  • Improved: graphs view extensive use of GDI supports shading, antialiasing and highlighting
  • Improved: Exporting chart now supports PNG and EMF format
  • Improved: Passively resolve IP addresses instead of automatically resolve
  • Improved: Importing packets file now supports EhterPeek v7, ArioPeek v9 and OmniPeek v9 format
  • Improved: Other improvements and bugs fixed