 A complete list of the possible commands available in NetWire was documented by CIRCL in April.  The NetWire decoder uses data from a packet capture file to generate the client and server session keys then decode the remaining encrypted packets.