The executive core of the program that captures the packets and saves the data into a file on the disk. It runs as a service (in Windows NT/2000/XP) or as a background application (in Windows 9x/Me).

It is intended for viewing and analyzing gathered data and configuration of the service. The communication between the viewer and the Daemon is kept using the protocols of the TCP/IP standard — thanks to this fact it is possible to connect not only from local (from the same computer) but also from any other computer in the local network respectively in the Internet. The detail description is located in chapter 5.1.