LGOSystems Logo
FrameSeer Online Help
Aiuto di FrameSeer
About LGOSystems

Jan 1, 2014: Please note that purchase of LGOSystems products is temporarily disabled while the products are undergoing redevelopment. We apologise for any inconvenience.

FrameSeer is an inexpensive network packet capture application for the Apple Macintosh. FrameSeer is a “universal binary” that runs on Mac OS X 10.4.5 (Tiger) or later.

Packet-capture applications go by a variety of names including, sniffing tools or sniffers (after the Network Associates "Sniffer" product), frame grabbers, packet monitors, and protocol analyzers.

Packet-capture tools are essential aids for diagnosing communications problems, investigating network security breaches, and for general network performance monitoring and troubleshooting tasks.

FrameSeer is a native Mac OS X ("Cocoa/Aqua") application and will help you to diagnose network faults with confidence. Once you've used FrameSeer to track down your first network problem, you'll reach for it whenever your network hiccups.

FrameSeer can capture traffic on your Ethernet, AirPort, PPPoE (eg aDSL or cable-modem), PPP (eg dial-up modem) and loopback interfaces. FrameSeer can also open tcpdump files captured either on Mac OS X systems or on little-endian systems such as Linux.

  • Can't login to your ISP?
  • Can't check your email?
  • Can't reach DotMac?
  • Your printer is on but nothing is coming out?
  • The server is up and you can ping it, but ftp doesn't work?
FrameSeer will help you work out exactly where the problem is by showing you what the printers and servers are doing at the network level.
  • Why is that light blinking on my broadband router all the time?
  • Why does my AirPort hub keep dialling my ISP?
  • Why do I seem to get unexpected network traffic whenever I launch that particular application?
FrameSeer will show you the traffic, which machines are causing it, and where it is going.

FrameSeer is installed via simple Drag-and-Drop straight into your Applications folder.

You don't need to be a networking guru to drive FrameSeer. The built-in online help teaches you just about everything you need to know about TCP/IP networking. No longer will you be totally reliant on your friendly network administrator or HelpDesk. You'll be able to diagnose most problems yourself.
Diagnosis begins at the physical interface
FrameSeer Document Window Whenever you open a new capture document, FrameSeer automatically selects your Macintosh's primary interface*.

Automatic selection can be a valuable clue. For example, if you think that your Ethernet port is active but FrameSeer selects your AirPort card, you'll probably want to check your Network Preferences and Ethernet cable.

FrameSeer continuously monitors the selected interface. Any changes show up here as soon as they are discovered**.
* Your primary interface is controlled from your Network System Preferences. For each Location, you decide which interfaces are available and their order of preference. Your primary interface is the first active interface in that list. ** Some third-party network cards do not supply all the necesssary signals to Mac OS X. If Mac OS X can't work out what is going on, neither can FrameSeer. You should keep this kind of limitation in mind when considering non-Apple hardware.

Interface selection
You can tell FrameSeer to capture on any known interface*. If you start capturing on an interface that isn't available, FrameSeer will wait until the interface comes up and then start the capture automatically.

FrameSeer isn't restricted to capturing on one interface at a time. If you need to capture on multiple interfaces (eg, to capture traffic routing through your Macintosh), or if you want to run two captures on the same interface (eg to apply different filters), open as many windows as you need.
Interface Popup Menu
* Frame types currently supported are Ethernet, AirPort, PPPoE, PPP and loopback.

Packet capture
Selecting Frames

Click Start to begin the capture. Click it again to stop.

Filters can be defined to restrict what is captured.

Packets are displayed as they are captured (it is possible to turn this off if desired).

You can have multiple captures occurring simultaneously on different interfaces. For example, you may wish to view:
  • Both the PPP and Ethernet interfaces during a PPPoE session
  • Both the Local and Primary interfaces during an SSH tunnelling session
  • All of your interfaces if your Macintosh is providing routing services
You can also have multiple captures occurring simultaneously on the same interface. For example, you may wish to apply different filters to the same traffic stream.

The information shown in the Capture tab can be copied to the clipboard or exported into a tab-separated format file. This lets you easily import capture information into other applications for further analysis.

Packet decode
To view a packet's contents, click on the Decode tab.

Decodes can be printed.

Decodes can also copied to the clipboard or exported into tab-separated format files.
Decoding Frames

Traffic Displays
Traffic Displays
Quickly characterise your traffic and visualise where it is going:
  • The Map lets you find your busiest paths at the Data-Link, Network and Transport layers;
  • The Protocol display provides a breakdown of your traffic types at each Layer; and
  • The Size display tells you how many frames of which size are being placed on the wire.
The traffic displays can also be printed.

Online Help
Check out FrameSeer's complete online help (Aiuto di FrameSeer) for additional information.