UDP Flow Monitor
The UDP Flow Monitor plugin simplifies UDP analysis by hiding low-level details and showing a clear, readable log of conversations, just like the UDP Socket plugin. The plugin supports easy filtering by address or port and runs on libpcap, the trusted cross-platform packet capture library.
Basic Setup
In IO Ninja, click the “New Session” dropdown and select “UDP Flow Monitor”.

Select a network interface from “Device:”, e.g. “Adapter for loopback traffic capture”.

Click the “Capture” button to the right of the “Device:” dropdown to start capturing traffic.

Monitor UDP traffic captured according to your settings.

Adjust settings as needed via the “Settings” button (see “Settings” section below for details).
Settings

Setting |
Description |
Default |
---|---|---|
Device |
The device to capture. |
|
Promiscious mode |
Intercept and analyze all network traffic, not just the data specifically directed to it. |
False |
Capture filter |
Term to filter with when capturing packets. |
|
View filter |
Term to filter with when displaying packets. |
|
IP fragment limit |
The maximum number of IP fragments. IP fragments refer to the pieces of a larger IP packet that has been broken up for transmission across a network. |
8 |
IP fragment timeout (ms) |
The maximum delay between IP fragments. |
10000 |
Snapshot size |
Pcap (packet capture) snapshot size. |
65536 |
Kernel buffer size |
Pcap (packet capture) kernel buffer size. |
0 |
RX buffer size (B) |
The full size of the incoming data (RX) buffer. Affects read throughput. |
1048576 |
RX buffer full notifications |
Toggle warnings in log about the incoming data (RX) buffer getting full. |
False |