Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Does WinPacMonDB capture and store all the data from every packet?

April 26, 2017capture Data packet store winpacmondb

0

10 Posted

Does WinPacMonDB capture and store all the data from every packet?

1 Answer

0

10 Posted

Yes and No. In DETAILS mode, WinPacMonDB captures every byte of every packet (for the selected IP addresses) and stores the data in a .details file. In FIELDS (CARNIVORE) mode, WinPacMonDB captures each packet, decodes the port information, and stores statistics for the first packet of each transaction in the database (per the following list). It is unnecessary to store all the transaction data, and the database would soon become unmanageable if it tried to handle all data for every packet on hi-volume networks.