- The sniffer can be started and stopped, frozen to examine a particular moment in time, cleared to a default state, or reset to the previous state.
- Network traffic can be logged, either as a text file for manual examination, or in binary, in which case it can be replayed (either at the same speed, speeded up or slowed down).
- The packet monitor can be configured to show various items of information about each captured packet; the graphic display can be set to control the rate at whih the load histograms move, and the periods for the two time-avaraged load bars.
- KSnuffle supports multiple concurrent sniffers and log replayers.