Pkviz is a tool for plotting and cycling through and animating a series of network packets captured by tcpdump. What makes it unique is that the packets’ structure is visualized, not any labels and not time itself. Pkviz takes each byte in a packet and plots it out end-to-end, left-to-right, from the first byte to the last. How high the dot gets plotted depends on the value of the byte: bytes with a value of 0 are at the bottom and those which are 255 (0xff) – the maximum value of a byte – get plotted at the top. This might not be interesting for one packet, but that changes when you start looking at thousands of packets. Pkviz can cycle through thousands of packets in the set so you can see what happened on the wire.
SynScope is an offline visualization and alignment tool for time-varying signals acquired from multiple sources that may differ in offset and/or sample rate. SynScope allows you to define reference points that correspond to identical events between source pairs. It then estimates the offset and resample rate to link these sources. It maps sample time from one source to the other via a link equation. Signal alignment can be inspected with synchronous visualization or resampling. With synchronous visualization, linked signals scroll together according to the link relation. With resampling, linked signals are resampled to the highest sample rate and offset-compensated.