Analyzing past traffic.

[mutha66]

I am demo-ing Colasoft Capsa and think it's pretty cool. One question I have is how to analyze past traffic. I also run MRTG and sometimes I notice a huge spike in traffic say at 9am but dont get to analyze it till noon. How do I go back to 9am in order to view the traffic?

[Nelson]

If you want to analyze past traffic, you need to firstly save them into files. M
Make sure you have enough disk space to store traffic. This requires lots of disk space (depends on the utilization of your network).

You can configure it to periodically save traffic in the general settings.

[mutha66]

OK, Thanks. Is there anyway to keep the file size down. Right now I am trying to have save a file every hour but the file size reaches over 300 MB. I have plenty of disk space for this but it makes opening the file in Capsa rather slow.

[Nelson]

Then I suggest you split Packet files by file size rather than one hour interval.
You can still know the what time range it belongs to by cheching the establish timestamp of the file in windows file attribute.