What Else Do You Want?

• protocol awareness
  • what does "email" look like? POP? IRC? AOL Instant Messenger? a tarfile?
• full-content analysis
  • what about a gzipped tarfile containig some email, some DOC files, and /etc/passwd, moved through the net via IRC DCC SEND?
• searchability
  • what you're looking for
  • what you don't want to look at
• viewing tools and graphics
  • graphical display of graphics
  • graphics for looking at network information
  • summary reports