Abstract: Analyzing data on a network. A method of analyzing data on a network is disclosed. The method includes capturing network traffic on the network during a period of time where the network traffic is captured as raw data into data blocks. The data blocks are streamed to a mass storage. The data blocks are organized into logical blocks on the mass storage. A set of data points are compiled. The data points are useful for defining information about the logical blocks. The data points include an offset defining a number of bytes into the captured data and datum headers including the number of frames into a logical block, number of bytes contained in the logical block and clock ticks since the initiation of capturing.

Abstract: Analyzing data on a network. At a network monitoring computer, network traffic is captured during a period of time. The network traffic is compiled into sections. Information about the sections including, start time, end time, number of frames in the section and bytes/sec are compiled. At a user computer remote from the network monitoring computer, a histogram is stored. The histogram includes for substantially all of the captured network traffic, start time, end time, total frames and total bytes. The histogram also includes for each of the sections, the information about the sections.