Tips for effective use
- Ctrl+O: Open PCAP file
- Ctrl+L: Start live capture
- Ctrl+T: Stop capture
- Ctrl+D: Browse DataModel
- Ctrl+P: Toggle packet list updating
Right-click a packet in the list to open it in a new window.
This will be very useful if you want to make use of the schema while looking at an ID_DATA packet.
If you just want to use WinDivert without looking at the packets, you can prevent the packet list view from updating by clicking the "pause" button on both tabs after Roblox has loaded. This will keep WinDivert running in the background without cluttering the displayed packet lists.
Yellow packets are out-of-order or incomplete packets. When packets are duplicated on the network level or sent more than once by the client or server, the later versions may show up as yellow in the packet list. Large packets may also be split before being transmitted on the network. Incomplete split packets will appear yellow in Sala, until they are completely received and reconstructed. Yellow packets are common and normal.
Red packets are packets that are not supported by Sala, or malformed packets. If red packets appear in your packet list while capturing packets, it may indicate a bug in Sala.