This ZIP file contains two traces captured concurrently:
There is no NATing involved in these traces but the web server does use TCP Segmentation Offload (TSO).
This ZIP file contains four traces captured concurrently from four points in a network:
These files can be used to demonstrate and learn how to use Workbench.
As the packets flow between the two capture points they pass through SNAT, DNAT and TCP Segmentation Offload.
These traces were captured as a user explored the unencrypted section of the TribeLab website; one trace is from the user's PC and the other from one of the website server.
The traffic passes through SNAT, DNAT and TSO. To generate delays and dropped packets, two videos were streamed by another PC at the client location. The clocks weren't synchronized.
This ZIP file contains two traces containing Microsoft Exchange traffic captured concurrently:
One of the files contains some duplicate packets and so these traces can be used to demonstrate the dedup function.
The traces contain markers generated by TribeLab Sonar and simple ping markers, both of which are detected by Workbench.
The traces contain markers generated by TribeLab Sonar.
This is the .pml file that Marc Thach used to diagnose the type-ahead problem.
This procmon file accompanies the video describing the problem of Notepad slow in a XenApp environment.
This is the batch command script used start procmon with a unique file name each time it's started. It's also suitable for use with Windows Task Scheduler.
This is the Process Monitor configuration file with the filters to capture Word interacting with the NRPortbl directory and the DMS application server.
No recent activity