traceplus win32 5.52

TracePlus Win description
It shows you the interaction between your Win32 application and multiple Win32 APIs TracePlus/Win32 will provide information on application usage of the Win32, ODBC, RAS, MAPI, TAPI and Win32 Internet APIs.

TracePlus Win32 traces 32 categories of API functions, comprising nearly 1350 API calls.

The API categories are:
· Access Control
· Profile Functions
· Application related (Kernel)
· Registry
· Common Controls
· Remote Access (RAS)
· Date and Time
· Resource Management
· DDEML
· Serial Communications
· Windows NT Event Log
· Service Manager
· File I/O
· Shell
· File System
· Simple MAPI
· Memory Management
· System Related
· Multimedia APIs
· TAPI
· Network (WNetxxx() functions)
· Threads
· ODBC (Full ODBC 3.x support)
· Timers
· OLE (Base)
· Tokens
· OLE (COM)
· Win32 Internet API (Expanded support)
· Pipes and Mailslots
· Windows GUI (Expanded support)
· Processes

Using its unique visual realtime display of Win32 activity, you can spot timing-sensitive API issues, view error codes for failed Win32 functions, reverse engineer other Win32 applications without source code, locate DLLs loaded by an application, and discover what registry keys are used by an application.

TracePlus/Win32 has proprietary technology called Cyclone Plus which detects and hooks API functions both inside and outside of the process being spied upon. Thus Java applications, Active X controls, out of process OLE servers, and child processes will be detected and traced automatically.

TracePlus can prevent an application from detecting that it is being run in a debugger. Some well known applications have code in them that prevent applications such as TracePlus from revealing the way that they operate. Such applications abort immediately after they are launched, or disable certain features of the application when a debugger is detected.

TracePlus is aware of several different methods by which applications can detect whether they are being debugged. Via these same techniques, TracePlus indicates to the application that in fact it is not being debugged. Such applications will then run normally inside of TracePlus.

Here are some key features of "TracePlus Win":

· Supported API functions that fail are indicated in the Diagnostics View along with the Win32 error code describing the failure
· Displays API calls originating from ActiveX controls and COM objects instanced by an application
· Displays API and ODBC calls originating from a child process
· Displays ODBC calls originating from the Microsoft Jet Database Engine, and Active Data Objects (ADO)
· Works with most commercial Win32 applications (release versions) with no modifications to the target application
· Compatible with Microsoft Terminal Server and Remote Desktop (Windows NT 4.x, Windows 2000, Windows 2003 Server)
· Supports Win32 .EXE files from all languages and compilers (including Visual C++, Visual Basic, Visual C#, Microsoft Access, MASM, Borland Delphi and C++ Builder, Sybase PowerBuilder)
· Works with most Win32 Services on platforms that support services (Windows NT 4.x, Windows 2000, Windows XP, Windows 2003 Server)
· The Registry View displays accesses made to the Windows registry by one or more processes. Using a unique algorithm, TracePlus determines the full key name as well as displaying the value of the key.
· Registry accesses that fail are indicated in the Registry View along with the Win32 error code describing the failure
· User-definable filters limit what is displayed in the Registry View to the types of Registry accesses that interest you
· The text of SQL statements transmitted via the ODBC API is displayed in the SQL View
· Contents of result columns displayed in the SQL View along with the SQL statement
· Displays the contents of all variables bound to parameters in a SQL Statement. This information is displayed inside the ODBC functions SQLExecute() or SQLExecDirect() in the Diagnostics View.
· Execution time is profiled in the SQL View for each SQL statement
· SQL statements that fail are indicated in the SQL View along with full ODBC error information describing the failure
· File opening, closing, creation, deletion, copying, moving, and renaming by an application are detailed in the File I/O View
· File reads, writes, locks, and unlocks are detailed in the File I/O View
· Manipulation of mapped files (open, create, close, read, write, flush) are detailed in the File I/O View
· The referenced filename is displayed for every file open or create appearing in the File I/O View
· Mapped Views are supported in the File I/O View
· User-definable filters limit what is displayed in the File I/O View to the types of File I/O that interest you
· The status of COM object creation via CoCreateInstance() and CoCreateInstanceEx() is detailed in Status View
· DLL loading and unloading is profiled in the Status View. DLL load events contain version information (if available) for the module being loaded.
· The text of messages sent via OutputDebugString() appears in the Status View
· User definable filter profiles enable separate API configurations for different capture sessions


Requirements:

· Compatible with the WOW64 subsystem on Windows XP x64, Windows 2003 Server x64, and Windows Vista x64
· Pentium 3 or AMD Athlon 1 GHZ or greater
· 192 MB RAM
· 10 MB disk space

Limitations:

· Function details in the Diagnostics View will be fully visible for the first 20 items.
· Certain statistics in all views will be fully visible for the first 20 items

TracePlus/Win32 shows you the interaction between your Win32
application and multiple Win32 APIs. Supported
APIs that are displayed in realtime include ODBC, OLE, COM, TAPI,
WININET, registry, DB-Library, and more. Integrated SQL capture window
displays SQL statements generated by the supported database APIs.
Status window displays DLL version information, OutputDebugString() calls, and more.

TracePlus/Win32 will provide information on application usage of the Win32, ODBC, RAS, MAPI, TAPI and Win32 Internet APIs.

TracePlus Win32 traces 32 categories of API functions, comprising nearly 1350 API calls.

The API categories are:
· Access Control
· Profile Functions
· Application related (Kernel)
· Registry
· Common Controls
· Remote Access (RAS)
· Date and Time
· Resource Management
· DDEML
· Serial Communications
· Windows NT Event Log
· Service Manager
· File I/O
· Shell
· File System
· Simple MAPI
· Memory Management
· System Related
· Multimedia APIs
· TAPI
· Network (WNetxxx() functions)
· Threads
· ODBC (Full ODBC 3.x support)
· Timers
· OLE (Base)
· Tokens
· OLE (COM)
· Win32 Internet API (Expanded support)
· Pipes and Mailslots
· Windows GUI (Expanded support)
· Processes

Using its unique visual realtime display of Win32 activity, you can spot timing-sensitive API issues, view error codes for failed Win32 functions, reverse engineer other Win32 applications without source code, locate DLLs loaded by an application, and discover what registry keys are used by an application.

TracePlus/Win32 has proprietary technology called Cyclone Plus which detects and hooks API functions both inside and outside of the process being spied upon. Thus Java applications, Active X controls, out of process OLE servers, and child processes will be detected and traced automatically.

TracePlus can prevent an application from detecting that it is being run in a debugger. Some well known applications have code in them that prevent applications such as TracePlus from revealing the way that they operate. Such applications abort immediately after they are launched, or disable certain features of the application when a debugger is detected.

TracePlus is aware of several different methods by which applications can detect whether they are being debugged. Via these same techniques, TracePlus indicates to the application that in fact it is not being debugged. Such applications will then run normally inside of TracePlus.

Here are some key features of "TracePlus Win":

· Supported API functions that fail are indicated in the Diagnostics View along with the Win32 error code describing the failure
· Displays API calls originating from ActiveX controls and COM objects instanced by an application
· Displays API and ODBC calls originating from a child process
· Displays ODBC calls originating from the Microsoft Jet Database Engine, and Active Data Objects (ADO)
· Works with most commercial Win32 applications (release versions) with no modifications to the target application
· Compatible with Microsoft Terminal Server and Remote Desktop (Windows NT 4.x, Windows 2000, Windows 2003 Server)
· Supports Win32 .EXE files from all languages and compilers (including Visual C++, Visual Basic, Visual C#, Microsoft Access, MASM, Borland Delphi and C++ Builder, Sybase PowerBuilder)
· Works with most Win32 Services on platforms that support services (Windows NT 4.x, Windows 2000, Windows XP, Windows 2003 Server)
· The Registry View displays accesses made to the Windows registry by one or more processes. Using a unique algorithm, TracePlus determines the full key name as well as displaying the value of the key.
· Registry accesses that fail are indicated in the Registry View along with the Win32 error code describing the failure
· User-definable filters limit what is displayed in the Registry View to the types of Registry accesses that interest you
· The text of SQL statements transmitted via the ODBC API is displayed in the SQL View
· Contents of result columns displayed in the SQL View along with the SQL statement
· Displays the contents of all variables bound to parameters in a SQL Statement. This information is displayed inside the ODBC functions SQLExecute() or SQLExecDirect() in the Diagnostics View.
· Execution time is profiled in the SQL View for each SQL statement
· SQL statements that fail are indicated in the SQL View along with full ODBC error information describing the failure
· File opening, closing, creation, deletion, copying, moving, and renaming by an application are detailed in the File I/O View
· File reads, writes, locks, and unlocks are detailed in the File I/O View
· Manipulation of mapped files (open, create, close, read, write, flush) are detailed in the File I/O View
· The referenced filename is displayed for every file open or create appearing in the File I/O View
· Mapped Views are supported in the File I/O View
· User-definable filters limit what is displayed in the File I/O View to the types of File I/O that interest you
· The status of COM object creation via CoCreateInstance() and CoCreateInstanceEx() is detailed in Status View
· DLL loading and unloading is profiled in the Status View. DLL load events contain version information (if available) for the module being loaded.
· The text of messages sent via OutputDebugString() appears in the Status View
· User definable filter profiles enable separate API configurations for different capture sessions

TracePlus/Winsock shows you the interaction between your Win32 application and Winsock 1.1/2.0, WININET, RAS, and Microsoft Winsock extensions with no modifications to your existing program. Supports .NET applications as well as COM and ActiveX objects. TracePlus displays the Winsock functions called by your Internet application to access the internet and displays detailed information including error messages if your application is having trouble communicating with the Internet.

TracePlus/Winsock is a powerful application-level performance and diagnostic tool for Win32 platforms.

Featuring an integrated data analyser, TracePlus moves beyond the realm of displaying API calls, being both a full-featured Winsock spy and data analysis tool.

Using its unique visual realtime display of Winsock activity, you can spot timing-sensitive Winsock problems, view error codes for failed Winsock functions, reverse engineer other Winsock applications without source code, interpret conversations between two Winsock applications, and learn how Internet protocols are implemented.

TracePlus will prevent a program from detecting that it is being run in a debugger.

Some well known applications have code in them that prevent applications such as TracePlus from revealing the way that they operate. Such applications abort immediately after they are launched, or disable certain features of the application when a debugger is detected.

TracePlus is aware of several different methods by which applications can detect whether they are being debugged. Via these same techniques, TracePlus indicates to the application that in fact it is not being debugged. Such applications will then run normally inside of TracePlus.

Here are some key features of "TracePlusWinsock":

· Detailed information on each call to the Winsock 2 API as well as the Microsoft Winsock extensions.
· Detailed information on each call made to the Win32 Internet API (WININET). In addition, several of the WININET API functions will display the data packet associated with that function in the Data View.
· Detailed information on each call made to the Remote Access Services (RAS) API.
· Detailed information on standard Win32 File I/O API functions when socket numbers are passed instead of file handles.
· WSAAsyncxxx() calls are monitored, and detailed information is provided on each posted asynchronous notification and statistics are provided on response time.
· Full IPV6 Support. TracePlus/Winsock can distinguish between IPV4 and IPV6 addresses and display each one in the appropriate format. IPV6 socket options are recognized in the Socket View.
· Detailed information on each call to an I/O completion routine, including statistics on response time.
· Novell IPX Support. Peer addresses are formatted in IPX format. Microsoft specific IPX socket options are recognized in the Socket View.
· Full support for I/O completion ports. Calls to CreateIOCompletionPort(), GetQueued(), and PostQueued() are monitored, and queued packets will be displayed in the Data View
· Supported API functions that fail are indicated in the Diagnostics View along with the Winsock or Win32 error code describing the failure
· Displays Winsock traffic originating from Java applets and Javascript embedded in a Web page
· Displays Winsock traffic originating from ActiveX controls and COM objects instanced by an application.
· Detailed information on all Winsock, RAS, and WININET API calls originating from a child process
· Works with most commercial Win32 applications (release versions) with no modifications to the target application
· Compatible with Microsoft Terminal Server (Windows NT 4.x, Windows 2000, Windows 2003 Server)
· Works with most Win32 Services on platforms that support services (Windows NT 4.x, Windows 2000, Windows XP, Windows 2003 Server)
· Supports Win32 .EXE files from all languages and compilers (including Visual C++, Visual Basic, Visual C#, Microsoft Access, MASM, Borland Delphi and C++ Builder, Sybase PowerBuilder)
· Session view displays detailed information about each data packet sent or received during a session between your PC and the host machine. A Session is defined as all data transferred via a single socket.
· DNS Lookup View displays statistics on the calls made by the application to translate a domain name (www.anydomain.com) to an IP address.
· Connect Times View displays statistics on the amount of time taken by the server to acknowledge a connection request made by the application.
· Microsecond timing accuracy on Windows NT 4.x, Windows 2000, Windows XP, and Windows 2003 Server.
· User definable filter profiles enable separate API configurations for different capture sessions
· Displays the server (peer) IP address for all API function calls, socket states, and data packets

TracePlusWinsock description
A software application that shows you the interaction between your Win32 application and the 32 bit Winsock API TracePlus/Winsock is a powerful application-level performance and diagnostic tool for Win32 platforms.

Featuring an integrated data analyser, TracePlus moves beyond the realm of displaying API calls, being both a full-featured Winsock spy and data analysis tool.

Using its unique visual realtime display of Winsock activity, you can spot timing-sensitive Winsock problems, view error codes for failed Winsock functions, reverse engineer other Winsock applications without source code, interpret conversations between two Winsock applications, and learn how Internet protocols are implemented.

TracePlus will prevent a program from detecting that it is being run in a debugger.

Some well known applications have code in them that prevent applications such as TracePlus from revealing the way that they operate. Such applications abort immediately after they are launched, or disable certain features of the application when a debugger is detected.

TracePlus is aware of several different methods by which applications can detect whether they are being debugged. Via these same techniques, TracePlus indicates to the application that in fact it is not being debugged. Such applications will then run normally inside of TracePlus.

Here are some key features of "TracePlusWinsock":

· Detailed information on each call to the Winsock 2 API as well as the Microsoft Winsock extensions.
· Detailed information on each call made to the Win32 Internet API (WININET). In addition, several of the WININET API functions will display the data packet associated with that function in the Data View.
· Detailed information on each call made to the Remote Access Services (RAS) API.
· Detailed information on standard Win32 File I/O API functions when socket numbers are passed instead of file handles.
· WSAAsyncxxx() calls are monitored, and detailed information is provided on each posted asynchronous notification and statistics are provided on response time.
· Full IPV6 Support. TracePlus/Winsock can distinguish between IPV4 and IPV6 addresses and display each one in the appropriate format. IPV6 socket options are recognized in the Socket View.
· Detailed information on each call to an I/O completion routine, including statistics on response time.
· Novell IPX Support. Peer addresses are formatted in IPX format. Microsoft specific IPX socket options are recognized in the Socket View.
· Full support for I/O completion ports. Calls to CreateIOCompletionPort(), GetQueued(), and PostQueued() are monitored, and queued packets will be displayed in the Data View
· Supported API functions that fail are indicated in the Diagnostics View along with the Winsock or Win32 error code describing the failure
· Displays Winsock traffic originating from Java applets and Javascript embedded in a Web page
· Displays Winsock traffic originating from ActiveX controls and COM objects instanced by an application.
· Detailed information on all Winsock, RAS, and WININET API calls originating from a child process
· Works with most commercial Win32 applications (release versions) with no modifications to the target application
· Compatible with Microsoft Terminal Server (Windows NT 4.x, Windows 2000, Windows 2003 Server)
· Works with most Win32 Services on platforms that support services (Windows NT 4.x, Windows 2000, Windows XP, Windows 2003 Server)
· Supports Win32 .EXE files from all languages and compilers (including Visual C++, Visual Basic, Visual C#, Microsoft Access, MASM, Borland Delphi and C++ Builder, Sybase PowerBuilder)
· Session view displays detailed information about each data packet sent or received during a session between your PC and the host machine. A Session is defined as all data transferred via a single socket.
· DNS Lookup View displays statistics on the calls made by the application to translate a domain name (www.anydomain.com) to an IP address.
· Connect Times View displays statistics on the amount of time taken by the server to acknowledge a connection request made by the application.
· Microsecond timing accuracy on Windows NT 4.x, Windows 2000, Windows XP, and Windows 2003 Server.
· User definable filter profiles enable separate API configurations for different capture sessions
· Displays the server (peer) IP address for all API function calls, socket states, and data packets


Requirements:

· Pentium 3 or AMD Athlon 1 GHZ or greater
· 192 MB RAM
· 10 MB disk space


Limitations:

· Starting or cleaning Captures will be disabled after 40 minutes
· API functions in the Diagnostics View will be fully visible for the first 20 items.
· Certain statistics in all views will be fully visible for the first 20 items
· Save feature is disabled

Win32 APIDOS is a free and useful Win API utility.

TracePlus Web Detective Standard Edition description
Performance analysis and HTTP diagnostics for Web and eBusiness applications TracePlus/Web Detective is the a HTTP trace/analysis program that was designed for Web development. The Web Detective spys on the HTTP protocol which the Web browser uses to communicate with the Web server, and displays it in an easy to understand format. HTTP protocol help is provided by a Windows help file which is hyperlinked to the Web Detective.

TracePlus/Web Detective incorporates the same technology used in our TracePlus/Winsock product known as Cyclone Plus debugging technology that supports both HTTP and HTTPS protocols (HTTPS is available if the application uses the Microsoft WININET API).

In addition the Cyclone Plus technology has the ability to intercept HTTP information in Windows applications without launching them from TracePlus. This is a convenient feature to have when you are in a hurry.

TracePlus assigns a session ID to all headers that were sent or received within a process on the same socket number. Then the Protocol View is sorted by the session ID. What happens is that all requests and responses will line up in pairs (except when the client makes more than one request simultaneously on the same socket. This way, you can easily understand the logical grouping of HTTP requests and responses.

Here are some key features of "TracePlus Web Detective Standard Edition":

· View encrypted HTTPS transactions (SSL support)
· View complete HTTP/HTTPS headers including all header fields and cookie information
· Splits parameters of GET and POST requests into separate fields for easy viewing
· Server response time calculated for HTTP and HTTPS requests
· Works with all commercial Web Browsers including Microsoft Internet Explorer, Netscape Navigator, Opera, and AOL (SSL support for Internet Explorer)
· Works with most commercial Win32 applications that use HTTP or HTTP via WININET (release versions) with no modifications to the target application
· Displays HTTP or HTTPS traffic originating from Java applets and Javascript embedded in a Web page (HTTPS traffic supported under Internet Explorer)
· Displays HTTP traffic originating from ActiveX controls referenced on a Web page
· Compatible with most commercial Browser Helper Objects (Internet Explorer 5.01 or later)
· Handles chunked HTTP and HTTPS headers
· View body text for both requests and responses.
· View graphic images as they appear in the browser.
· Adjustable SSL port numbers means you can display SSL on ports other than 443.
· Save Capture information as ZIP files
· Displays the server (peer) IP address for all headers and objects


Requirements:

· 192 MB RAM


Limitations:

· Starting or cleaning Captures will be disabled after 40 minutes
· Headers in the Protocol View will be fully visible for the first 20 items.
· Certain statistics in all views will be fully visible for the first 20 items

TracePlus/Ethernet is a powerful network monitoring, performance, and capture tool supporting 10-1000 MB/s Ethernet networks. 32 and 64 bit drivers are compatible with all Windows platforms. Network dashboard displays network performance updated each second. Provides details on bandwith by IP, top URLs, port activity, and traffic flow. Capture packets based on type, address, size, TCP/UDP port, or data pattern. Decodes IPv6 and SNMP packets. Imports and exports capture files from other packet analyzers including UNIX and Linux OSs. Supports IPv6, ICMPv6, and VLAN features of the 802.1Q/802.1P protocols.

TracePlus/Web Detective is the a HTTP trace/analysis program that was designed for Web development. The Web Detective spys on the HTTP protocol which the Web browser uses to communicate with the Web server, and displays it in an easy to understand format. HTTP protocol help is provided by a Windows help file which is hyperlinked to the Web Detective.

TracePlus/Web Detective incorporates the same technology used in our TracePlus/Winsock product known as Cyclone Plus debugging technology that supports both HTTP and HTTPS protocols (HTTPS is available if the application uses the Microsoft WININET API).

In addition the Cyclone Plus technology has the ability to intercept HTTP information in Windows applications without launching them from TracePlus. This is a convenient feature to have when you are in a hurry.

TracePlus assigns a session ID to all headers that were sent or received within a process on the same socket number. Then the Protocol View is sorted by the session ID. What happens is that all requests and responses will line up in pairs (except when the client makes more than one request simultaneously on the same socket. This way, you can easily understand the logical grouping of HTTP requests and responses.

Here are some key features of "TracePlus Web Detective Standard Edition":

· View encrypted HTTPS transactions (SSL support)
· View complete HTTP/HTTPS headers including all header fields and cookie information
· Splits parameters of GET and POST requests into separate fields for easy viewing
· Server response time calculated for HTTP and HTTPS requests
· Works with all commercial Web Browsers including Microsoft Internet Explorer, Netscape Navigator, Opera, and AOL (SSL support for Internet Explorer)
· Works with most commercial Win32 applications that use HTTP or HTTP via WININET (release versions) with no modifications to the target application
· Displays HTTP or HTTPS traffic originating from Java applets and Javascript embedded in a Web page (HTTPS traffic supported under Internet Explorer)
· Displays HTTP traffic originating from ActiveX controls referenced on a Web page
· Compatible with most commercial Browser Helper Objects (Internet Explorer 5.01 or later)
· Handles chunked HTTP and HTTPS headers
· View body text for both requests and responses.
· View graphic images as they appear in the browser.
· Adjustable SSL port numbers means you can display SSL on ports other than 443.
· Save Capture information as ZIP files
· Displays the server (peer) IP address for all headers and objects

TracePlus Ethernet description
TracePlus/Ethernet - analyze network performance and capture Ethernet packets in real-time TracePlus/Ethernet is a very powerful performance and capture software. Real-time statistics include bandwidth by node, protocol, and address pair. A Network dashboard displays network performance updated each second.

A history view chronicles the occurrence of specific IP events on your network. Capture packets based on type, address, size, TCP/UDP port, or data pattern. Decodes SNMP packets (all versions).

Intelligent data view formats IP user data for easy viewing. Imports capture files from other packet analyzers including UNIX and Linux OSs. Supports VLAN features of the 802.1Q/802.1P protocols.

Here are some key features of "TracePlus Ethernet":

· The Network Dashboard offers ten automobile-style gauges (five user configurable) that monitor network performance.
· The Network Dashboard contains three preset and four user defined automobile style gauges of network performance, including Packets/Second, Bytes/Second, and Utilization.
· The Bits per Second historical graph displays average throughput in bits per second over a period of two hours.
· The Packets per Second historical graph displays average throughput in bits per second at one minute intervals over a period of two hours.
· The Utilization historical graph displays a chart of average throughput in bits per second at one minute intervals over a period of two hours.
· The Size Distribution View displays a chart of average throughput in bits per second at one minute intervals over a period of two hours.
· IP Sleuth tracks down and identifies IP addresses seen on your network via WHOIS and IP netblock information.
· Ping utilities provides expanded functionality from the command-line version with Quality of Service options plus Copy and Save functionality.
· The IP Bandwidth Graph shows overall network usage by the top IP bandwidth consumers on your network.
· The IP Bandwidth View shows detailed network usage by each IP address on your network.
· The Top URLS View displays Web server performance and network load statistics for the top 200 server IP addresses seen on your network.
· The Port Activity View shows selected IP conversations that may threaten the security of your network including Trojan horse applications.
· Powerful IP Activity filtering narrows the statistical focus to specific IP subnets.
· IP Capture Wizard defines filter parameters for packet captures by answering a few questions.
· Quick Capture and Make Filter features generate filter parameters for a packet capture automatically based on an selected protocol, address, or conversation.
· Full support for networks using PPPoE for DSL connections
· Export packet captures in Libpcap, Microsoft Network Monitor, Sniffer (Network Associates), Sniffer (Network General) formats.
· IP Port definitions include over 200 known Trojan horse applications.
· MAC address/Vendor name translation supports over 7000 known Ethernet vendor codes
· History View supports over 30 different network protocols. The contents of the History View is automatically restored before each session, so you can have a running log of events on your network.
· The History View can be filtered by TCP or UDP protocol, and by local address or IP address (single or range)
· Graphical network usage display selectable from utilization, packets per second, and bytes per second.
· Powerful Network Statistics filtering narrows the statistical focus to specific protocol groups and IP subnets.
· Protocol View, Node View, MAC Addresses, and Conversations View can be sorted by any column
· Realtime network statistics include % of Bandwidth, Packets per second, Bytes per second, Broadcast packets per second, and Multicast packets per second.
· Powerful real-time packet sniffer means no waiting to see results!
· Full support for VLAN features of 802.1Q/802.1P protocols.
· Full decoding of TCP option fields.
· Full support (including decodes) for IPv6 and ICMPv6.
· Full support (including decodes) for SNMP and SNMP traps.
· Full support (including decodes) for BOOTP and DHCP including BOOTP Vendor Information and DHCP options
· Full support (including decodes) for ICMP messages, including all ICMP types with decoding of the included IP header in error.
· Full support (including decodes) for Cisco Discovery Protocol (CDP) and Cisco Group Management Protocol (CGMP)
· Microsecond timing accuracy on Windows NT 4.x, Windows 2000, Windows XP, and Windows 2003 Server.
· Compatible with any network speed from 1 to 1000 MB/s, including legacy 10 MB/s networks and 11 MB/s wireless networks (via an Ethernet NDIS compliant driver)
· Compatible with 802.3 Ethernet packets from 802.1b/802.1g network adapters
· Compatible with all current USB network adapters
· Switch effortlessly between multiple Network Adapters (one Network Adapter at a time).
· Compatible with popular network routers, switches, hubs, and firewalls including Cisco Systems, Foundry, Extreme Networks, 3-Com, HP, Netgear, and Linksys.


Limitations:

· Starting or cleaning Captures will be disabled after 40 minutes
· Packet captures will be limited to 4 minutes
· Certain statistics in all views will be fully visible for the first 20 items

TracePlus Web Detective eBusiness Edition description
A high resolution Performance analysis and HTTP diagnostics tool for Web and eBusiness TracePlus/Web Detective (eBusiness Edition) builds upon the technology used in our TracePlus/Web Detective (Standard Edition) product known as Cyclone Plus debugging technology that supports both HTTP and HTTPS protocols (HTTPS is available when using Internet Explorer, Netscape 8.x or higher, or FireFox 1.x or higher).

Furthermore, the Cyclone Plus technology has the ability to intercept HTTP information in Windows programs without launching them from TracePlus. This is a convenient feature to have when you are in a hurry.

Previous versions of the Web Detective presented HTTP headers in order that TracePlus intercepted them from the application. Since many Internet applications are multi-threaded, it became time consuming to locate the HTTP request and matching response in the Protocol View.

TracePlus assigns a session ID to all headers that were sent or received within a process on the same socket number. Then the Protocol View is sorted by the session ID. What happens is that all requests and responses will line up in pairs (except when the client makes more than one request simultaneously on the same socket. This way, you can easily understand the logical grouping of HTTP requests and responses.

The Web Detective (eBusiness Edition) provides performance analysis of the HTTP and HTTPS protocols in several ways:
· Each packet displayed includes the time it was decoded and the elapsed time from the request packet (for example, GET/Response).
· Each Web page displayed includes time that it was received, the total size of all objects for that page, the accumulated download time of the objects, and the calculated baud rate for the request.
· Each object downloaded for a specific Web page includes the time that it was received, the size of the object, the download time, and the baud rate.

TracePlus/Web Detective (eBusiness Edition) can unencrypt and display HTTPS traffic on encrypted SSL connections at any bit rate from 40 to 128 bits (Available when using Internet Explorer, Netscape 8.x or higher, or FireFox 1.x or higher).

TracePlus/Web Detective (eBusiness Edition) displays HTTP protocol information for SSL transactions if the application uses the Microsoft WININET API. This includes all versions of Internet Explorer starting from 4.0.

TracePlus/Web Detective (eBusiness Edition) displays HTTP protocol information for SSL transactions if the application uses the Open Source NSS v3.4 and NSPR v4 APIs. This includes Mozilla FireFox 1.x or higher, as well as Netscape Navigator 8.x or higher.

Here are some key features of "TracePlus Web Detective eBusiness Edition":

· Connection emulation feature converts capture timings to emulate end-user network connections such as dialup modems, DSL modems, and cable modems.
· Attach comments to any item in the Protocol View, Cookie View, DNS Lookup View, Connect Times View, Object View, and Page View.
· Improved microsecond timing accuracy.
· Compressed HTTP support (deflate and compressed). Display of compressed objects in uncompressed format
· Display of compressed size, actual size, and compressed/actual size ratio.
· Detailed cache statistics show you the status of an object in the cache before the client request and after the server response (Internet Explorer only).
· Cacheable status (calculated from HTTP response headers) displayed for each object in the Page View
· Time to First Byte calculation for all objects
· Graphical comparison of server load and response time
· Graphical timeline of object requests and responses by page
· Graphical comparison of object download speed by page
· Generate ASCII scripts from HTTP requests
· Works with all commercial Web Browsers including Microsoft Internet Explorer, Netscape Navigator, Opera, and AOL (SSL support for Internet Explorer)
· Works with most commercial Win32 applications that use HTTP or HTTP via WININET (release versions) with no modifications to the target application
· Displays HTTP or HTTPS traffic originating from Java applets and Javascript embedded in a Web page (HTTPS traffic supported under Internet Explorer, Netscape 8.x or higher, or FireFox 1.x or higher).
· Displays HTTP traffic originating from ActiveX controls referenced on a Web page
· Compatible with most commercial Browser Helper Objects (Internet Explorer 5.01 or later)
· Compatible with Microsoft Terminal Server (Windows NT 4.x, Windows 2000, Windows 2003 Server)
· Microsecond timing accuracy on Windows NT 4.x, Windows 2000, Windows XP, and Windows 2003 Server
· Syntax coloring HTTP/HTTPS header display
· View graphic images as they appear in the browser.
· View complete HTTP requests and responses (full headers and body) in the Object View and Protocol View
· Handles chunked HTTP and HTTPS headers
· Full support for Web acceleration hardware from companies such as Redline Networks, Fineground Networks, and Packeteer
· Adjustable SSL port numbers means you can display SSL on ports other than 443
· Splits parameters of GET and POST requests into separate fields for easy viewing
· Server response time calculated for HTTP and HTTPS requests
· User definable filter profiles enable separate application configurations for different Web capture sessions
· Save Capture information as ZIP files
· Displays the server (peer) IP address for all headers and objects


Requirements:

· 256 MB RAM


Limitations:

· In this demo starting or clearing Captures will be disabled after 30 minutes. Headers in the Protocol View will be fully visible for the first 20 items. Certain statistics in all views will be fully visible for the first 20 items