- Packets are logged, nominally, to a microsecond resolution. However, this really depends on the accuracy of the system clock, so the last few digits should be treated with some suspicion!
- Information such as the protocol, and source and destinations and ports, are extracted from captured. KSnuffle can be configured to convert, or nor, IP addresses to names, and port numbers to service names.
- Where relevant, other packet information is extracted. For instance, this area would show identifiers and offsets for fragmented IP datagrams.
- The packet size is shown in two values. The first figure is the size of the packet on the network. The second is the amount of data carried in the packet after the network overhead has been deducted (but note, this figure still includes such things as the TCP/IP header length).
- Lastly, the number of captured packets, and the total sizes of the packets are displayed.