Viewing a bounce diagram

The DNA Bounce Diagram is a packet flow timing diagram for conversations on the network. The view shows individual frames between nodes in the time sequence in which they occurred during the capture.

To open a Bounce Diagram:

  • Select a task in Task Hierarchy and then select View  ► Bounce Diagram from the main menu bar

  • Right-click a task in Task Hierarchy and select Bounce Diagram from the pop-up menu

  • Select a task in Task Hierarchy and then press [Ctrl-B]

  • Select a task in Task Hierarchy and then click Bounce diagram icon on the toolbar

Figure 1. Bounce Diagram View

Bounce diagram view
Bounce diagram view

When the task shown in the Bounce Diagram is merged or adjusted, the Bounce Diagram shows the timing graphically by accurately positioning the frame lines between the sending and receiving times as well as between the nodes. In addition, when a merged or adjusted task is viewed in a Bounce Diagram, it is much easier to see concurrent activity, such as all the TCP acks sent by the Server (199.199.199.1) shown here in red as almost horizontal lines. At the same time the Server was also receiving large amounts of incoming data, shown here in the fans of green lines. If the task has not been merged or adjusted, DNA cannot calculate start and end times, so the timing lines are horizontal and indicate direction but not sending and receiving times.

In the Bounce Diagram, each vertical line represents a node and the horizontal lines on the grid represent relative time increments in seconds. The time is relative to the start of the task, which begins at 0.00. Within the diagram, the colored lines represent captured frames. The size of each frame is indicated by a color described in the legend on the bottom of the window.

The bars in the packet histogram on the left show the relative number of frames for a specific time period and are color-coded as well to indicate the average frame size in each time period. The bars are scaled logarithmically.

For detailed information on the bars in the histogram or a specific frame, hover the cursor over the bar, packet histogram, or frame in question and an informational pop-up window opens as shown below on any tasks.

Figure 2. Bounce Diagram View, Hover Information

Bounce diagram view, hover information
Bounce diagram view, hover information

You can modify the information in a task by deleting time periods, frames, or nodes in a Bounce Diagram. You can use the search capability of the Edit  ► Find option on the pop-up menu to find the next frame or a time gap of a minimum size you specify, or to find the next or previous frame in the same conversation, thread, or in the task. You can also search by error using Next Error in the Find dialog box.

To delete a portion of the total time or frames, first zoom down to that portion before selecting the Delete option.