A network traffic analysis tool used to capture and analyze network packets, helping detect abnormal traffic and maintain network integrity and availability.
Step 1:
Visit official website to download
Step 2:
Starting installation of Colasoft Capsa 11 Free, and the setup wizard launched successfully.
Step 3:
Accepting the End User License Agreement (EULA) for Colasoft Capsa 11 Free installation.
Step 4:
Reviewing the Release Notes for Colasoft Capsa 11 Free during the software setup.
Step 5:
Selecting the destination folder for the Colasoft Capsa 11 Free installation.
Step 6:
Selecting components to install for Colasoft Capsa 11.
Step 7:
Selecting the Start Menu folder location for the program's shortcuts.
Step 8:
Choosing to create Desktop and Quick Start icons as additional tasks.
Step 9:
Ready to Install, confirming the settings before starting the installation.
Step 10:
An Information screen providing instructions for support/reporting problems and a link to Product Materials
Step 11:
Completing the Setup Wizard, allowing the user to Launch Program before clicking Finish.
Step 12:
Starting the Colasoft Software Activation Wizard and reading the product privacy statement.
Step 13:
Entering the Serial Number and selecting Activate online to complete the setup.
Step 14:
The software has been successfully activated, then click finish
Step 15:
Colasoft Capsa 11 interface opened and is ready to use.
On the start page, look for the active available network of adapter. This is for the active connection. Here, we are using Wi-Fi as the active connection. Click the checkbox next to the Wi-Fi adapter to monitor.
Select Full Analysis on the Analysis Profile tab and click the Start button. The interface will change and shows several tabs.
Go to Protocol tab, and we will notice the data is being encrypted.
Open a web browser. For this demo, we are using http://neverssl.com/ as this website intentionally uses an unencrypted site. On Capsa, go to Log tab > HTTP Log, we can see the url of the website we visited in a plain text.
Click on the “Alarm Explorer” for any security or fault event check. These are automated diagnoses of events that threaten the network's integrity, such as ARP attacks.
Go to “Summary” tab and look for the utilization. If utilization is too high, the network becomes unavailable for other users because it is congested.
Colasoft Capsa 11 is a comprehensive network analyzer that provides deep packet inspection (DPI) and real-time monitoring to analyze traffic at the packet level and allow authorized user to audit and enforce across both wired and wireless infrastructures.
Detection of Unencrypted Sensitive Data
It was quite successful at identifying "leaks." We used it to demonstrate that while SSL traffic keeps sensitive information protected and concealed, HTTP traffic leaves it exposed.
HTTPS Decryption and Audit
It support SSL/TLS decryption using imported key files to allows security teams to check encrypted web traffic for data leaks or unauthorized sharing and ensure confidential information protected.
Detection of ARP and DNS Spoofing
Capsa can detect ARP poisoning if attackers use it to replace it between two users and change the data. It will flagging suspicious ARP activity and showing that the network data path may be under attack.
TCP Flow and Sequence Analysis
Capsa identify session hijacking by monitoring TCP data flow and sequence numbers to make sure if attacker tries to inject fake or malicious packets into a connection it will raises an alert.
DoS and DDoS Attack Detection
Capsa can detect Denial of Service (DoS) and Distributed DoS attacks by identifying traffic floods and shows the source and target IP addresses so authorized users can block the attack and restore network service.
Network Performance Monitoring
By using its real-time dashboard, Capsa able to determine whether network usage and bandwidth keep running smoothly or heavy traffic sources or applications that slow down the network to prevent the downtime.