PCAP file. It's strengths lie in: * rapid reconstruction of flows (via indexing), * visual selection of source IP and destination TCP ports; * filtering by time, packet count, and/or byte count * tagging flows with keywords PR: ports/125624 Submitted by: Lee Hinman <lee@writequit.org>