|
Products
Screenshot
|
|
Simple
Interface
The main interface is composed of label a window and two
floating window, so users can easily switch back and forth in different
windows. Each window is vista style, concise and fashion.

|
|
Nodes
Explorer
Node explorer window displays all those involved in network communication
host of physical address or IP address. When you select a node in
this explorer window, the data displayed in tab views changes accordingly,
such as: statistics, conversation, logs, etc.

|
|
Statistic
Views
Sax2 has very rich statistics, nearly 100 statistical
counters to provide users with very detailed statistical information.
Statistical information is not only the overall situation, but also
has its own network endpoint summary statistics.

|
|
Conversation View
Conversation view is a more important part of Sax2. The view is
divided into two parts, shown above is the current network of communication
or the end of the conversation in communication, including IP, TCP,
UCP and ICMP. By viewing each conversation, we can count its source
address, destination address, the data packets of conversation and
the size of these data packets and other information. We can identify
the current communications of a conversation through such information.
Below is part of the invasion log pane, when you try to choose a
different conversation in conversations, it shows that the incident
related to the invasion, and shows all invasions by default.

|
|
Event View
Invasion
view’s the main function is focus checking invasions. The view has
the invasion event pane and invasion log pane two parts. The invasion
events statistics by different pane show that the classification
of the current network in all the statistical value of the invasion,
following is part of the invasion log pane. When you choose a different
entry in Statistics Pane, it shows that the incident related to
the invasion, and shows all invasions by default.

|
|
Logs
View
Log view records application layer traffic information in the network,
including HTTP request (Web browser), e-mail message (through the
mail SMTP/POP3), FTP transmission, MSN, and QQ. And log information
will be saved to your hard disk for inspection in accordance with
the needs of these users.
The interface of Log view shown below (the currently selected types
of logs is HTTP request). The view is divided into two parts, the
left window is a list of all types of logs, and the right window
is logs list. Click the left side of the different types of logs
in the superscript, and then you will see its counterpart in the
log on the right of the window.

|
|
Project
Status Window
Project status window shows the current status of the operation,
including start time, duration, capture data packets, buffer zones
and the use of network traffic curve.

|
|
Knowledge
Base Management
Sax2 provides more than 1,500 of the security policies by default,
Also, according to their own needs we can customize any security
strategy, targeting intrusion detection system which is the most
suitable for their own.

|
|
Detection
Experts Settings
“Detection Experts setting “is an important feature of Sax2 ,which
can analyze all the traffic expert-level intelligence in the network,
and report the invasion.

|
|
Name
Table
The name table allows you to make or edit alias
for addresses, ports and protocols, you may also specify the text
color for a selected item. This useful feature can make packet-related
information familiar and intelligible.
|
|
support multi-adapters
If you have more than
one adapters installed on the local machine, Sax2 can capture the
traffic on all the adapters.
|