Users of CloudShark Personal SaaS can take captures they’ve uploaded and put them together in “collections”. Collections are great for matching up multiple captures that all have to do with the same topic or problem, and is ideal for educators and bloggers looking to use CloudShark captures in their classes and content.
Better context makes for better analysis
Like everything we build into CloudShark, we’re always surprised by new ways that people are using it. Here’s some suggestions for getting the most out of collections.
- Support and Troubleshooting - Often, an IT or app support issue is going to have more than one capture associated with it. Using collections, you can group together the captures that relate toG a particular issue, and included a detailed description of the issue for easier collaboration.
- Incident Reporting - CloudShark is useful at all steps of the threat assessment lifecycle: identification, investigation, risk assessment, and remediation. When it comes to reporting, collections can serve as a record of an incident that can be used in the future should similar incidents arise again.
- Networking Coursework - There’s plenty of networking classes in University or otherwise that use CloudShark to share captures as part of course exercises, where students can get hands on experience and work with each other and their professors. Collections are great for putting captures together for a single exercise or when turning in your results.
- Blogs and Training - There’s a number of great blogs out there that focus on security and networking. If you’ve got your favorite blog that uses packet captures in your work, collections are an incredibly easy way to produce good content that includes real, detailed examples.
How to build collections of packet captures
- Select a number of captures you want to put in the collection.
- Click on Collections
- You’ll be asked to either create a new collection, or add the captures to an existing collection.
- If you make a new collection, give it a name and description. The description can use markdown syntax, so be as verbose as you want! A great idea here is to link to specific capture views (like a filter or a graph) in one of the captures in your collection. It even supports images and animated graphics.
- Decide if you want the collection as a whole to be public or private.
- Decide if you want the captures to be public, private, or to retain their current settings. You’ll get a warning if some of the captures are set to private; it just means that others won’t be able to see the captures without your login.
- Save the collection and you’re done! You’ll get a unique URL to the collection under cloudshark.org/collections/. Remember you can use this URL to share the collection with anyone!
- If you want to view your collections later, go to the Preferences menu in the top-right of your CloudShark page and select “Collections”.
Try out CS Personal SaaS today.
Start your FREE 30-day trial of CS Personal SaaS and see how pcap organization and sharing can improve your packet analysis! Sign up now »
Want articles like this delivered right to your inbox?
Sign up for our Newsletter
No spam, just good networking
