Wireshark Within
CACE Pilot is the only analysis tool to offer full integration with Wireshark. Use Wireshark on very large trace files by isolating interesting portions of the trace file using CACE Pilot s Adaptive Analysis Engine. The Wireshark capture and display filters are available within CACE Pilot as well as Wireshark s prodigious dissector library for deep packet analysis
Charts: Dynamic Visualization Components
CACE Pilot includes a complete collection of interactive Charts including bar, pie, and strip charts, conversation rings, scatter diagrams, and grids. Intuitive point-and-click process for selecting elements within a Chart, such as bars within a bar chart or time intervals within a strip chart.
Time Control: Flexible, Long-term Trending, Monitoring and Forensics
Viewing network traffic metrics computed over days, weeks, and months can be challenging. With CACE Pilot s "back-in-time" capability, you can easily move through View metrics over extended periods of time with just a few mouse clicks. Based on the selected time interval, sub-sampling and data aggregation techniques are used to optimize the granularity of the visual presentation of View metrics. The back-in-time capability can be applied to live and off-line traffic metrics.
Watches: Advanced Trigger-Alerting Mechanism
CACE Pilot includes a sophisticated triggering and alerting technology called "Watches". It is possible to create a Watch (trigger plus action) on virtually any View metric and be alerted based on a trigger condition computed on the metric. For example, the user can be alerted on high bandwidth, slow server response time, high TCP round-trip time, and so on. When a Watch detects that a trigger condition has been met, an action will be executed. Actions include event logging, sending email, and starting a packet capture.
Drill-Down: Innovative In-Depth Analysis
Drill-down is one of the most powerful and unique features in CACE Pilot. Drill-down occurs when the user applies a View to a source which itself is the result of a selection made within a previously-instantiated View. This powerful paradigm increases the user s analysis capabilities many-fold. Very large trace files can be analyzed using the drill-down feature to quickly find and isolate anomalous network behavior.
Superior Reporting
CACE Pilot offers an enhanced set of reporting capabilities that integrate fully with CACE Pilot Views, enabling you to create professional reports from what you see on the screen. CACE Pilot reports can be created in a variety of formats including PDF, Word and Excel
Unparalleled Wireless Support with AirPcap
CACE Pilot offers unparalleled functionality and versatility when applied to wireless networks through a comprehensive set of 802.11 Views that can be applied directly to 802.11 wireless sources. Thanks to the integration with CACE Technologies AirPcap adapters, CACE Pilot is the only product in the industry to offer full multi-channel packet capture from a laptop-based system. With AirPcap Ex or Nx, CACE Pilot can speed up the decryption of WPA and WPA2 (pre-shared key) 802.11 frames as well.