Capture Point Visualization
Estimate where the capture was taken by comparing TTLs and handshake timings.
Open the capture point view from the connection dashboard to see a diagram of the likely tap location:
- RTT-based hints. Initial RTT per connection helps infer distance from client or server.
- TTL-based hints. TTL deltas from both directions are considered.
- Device labels. MAC and IP addresses are annotated to identify endpoints.
- Device type detection. Common device types are guessed from traffic patterns.
iRTT Graph
The iRTT (initial round-trip time) graph visualizes the handshake RTT between endpoints so you can compare flows quickly.