An expert analysis system and statistic report engine for users of Triticom's Protocol Analyzers 'LANdecoder' and 'LANdecoder32' Triticom's LANdecoder is limitated to manual protocol analysis (frame analysis); it doesn't provide report functions or automatic analysis. Now automatic reports and LAN event detection can be done by LANreport. Most important, LANreport creates ARP tables as well as automatic alarms on duplicate MAC/IP addresses. Additionally, LANreport enables LANdecoder users todecode protocols which are not supported by LANdecoder.This is done by a filter & parsing function.