Structure View data visualizer is a two-part window. First part displays each monitored packet parsed according to installed set of protocols. Second part displays raw packet contents. Changing the current position in one window automatically changes the position in another, provided the Tools » Raw Data View » Synchronize option is turned on.
Each packet is matched against one or more of loaded protocol definition files and if matched successfully, all protocol fields are shown in the top part of the Structure View visualizer. For each field, its name, value, starting offset and size are displayed. If field consists of other fields, you may expand it by pressing the little plus icon or using the
Right Arrow key on the keyboard.
You may use mouse and keyboard to navigate to other fields within a current packet or to other packets.
If you bring up the context menu, the following commands are displayed:
See the Raw Data View visualizer section for description of the bottom part of the Structure View data visualizer.