Managing captured network traffic data

A system comprising:

• a capture server that includes:
• an interface that receives an identification of a problem on a network;
• a notification utility that identifies a set of capture components associated with the identified problem;
• a repository that archives at least a portion of traffic captured by the set of capture components during a period before the problem was identified;
• and
• and analysis engine that creates a display of information based on the at least portion of the traffic captured to facilitate diagnosis of the identified problem.

A method comprising:

• receiving, at a server, an identification of a problem on a network;
• identifying, by the server, a set of capture components associated with the identified problem;
• archiving, in one or more storage devices, at least a portion of traffic captured by the set of capture components during a period before the problem was identified;
• and
• displaying, on a display device, information based on the at least portion of the traffic captured to facilitate diagnosis of the identified problem.