Workbench 0.18 User Guide

Feature Pack Tools - Network Engineering

Marker Finder

The Marker Find tool is used to find Sonar and ping markers within one or more pcap/pcapng files.  

Marker Finder tool icon.

The tool lists the markers found together with their location.  For fast access, right-clicking on a found marker offers an option to open the correct file in Wireshark at the correct point in the Wireshark trace.  This means that it is incredibly easy for us to go straight to the point of a problem.

Starting a Marker Find

To find the markers in a data object, data set or directory data set drag any one or any combination of these data objects from the Object Explorer onto the workpad.  Then drag and drop the Marker Find tool onto any unoccupied area of the workpad.

 Drag and drop Marker Finder

As the tool is dragged over the workpad its border will turn green indicating that the tool supports the data on the workpad.  Marker Finder supports any pcap/pcapng file plus any other formats that can be transformed to pcapng, e.g. netsh trace using the Babel transformer.  If Marker Find detects an unsupported format the workpad border will turn red.

Marker Find Results

Once Marker Find starts it displays a results panel that overlays the desktop.  The results panel includes a list of files being processed and the status of the process.

 Marker Finder processing screenshot

Note how only four files are being searched for markers at the time of the above screenshot.  This is because Workbench limits the number of parallel searches to the number defined in Menu  > Tools  > Options  > Operations  > Marker Find.

 Marker Finder results screenshot

Once the processing has completed the results are shown below the file list.  Above we see that six files were searched and two markers were found in one of the files.

Right-click on any marker in the results window and choose Open in Wireshark to open the correct trace file at the marker record.