Storing, retrieving and displaying captured data in a network analysis system

摘要

Analyzing data on a network. A method of analyzing data on a network is disclosed. The method includes capturing network traffic on the network during a period of time where the network traffic is captured as raw data into data blocks. The data blocks are streamed to a mass storage. The data blocks are organized into logical blocks on the mass storage. A set of data points are compiled. The data points are useful for defining information about the logical blocks. The data points include an offset defining a number of bytes into the captured data and datum headers including the number of frames into a logical block, number of bytes contained in the logical block and clock ticks since the initiation of capturing.