Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout
Selecting Packets in the Decode Tab EARLY FIELD TRIAL Chapter 8 170 Sniffer Adaptive Application Analyzer You can select individual packets or a group of packets in the summary pane. Selecting packets allows you to mark key packets that are of interest to you, so that you can view and use them more easily. You can: Save the selected packets to a file (Display > Save Selected). Treat the selected packets as bookmarks, and use F2 to advance from one selected packet to the next. Using the Decode Tab Toolbar The Decode tab provides a toolbar at the top of the window with shortcuts to useful functionality (Figure 8-4). Each of the buttons in the toolbar is described in the table that follows. Figure 8-4. Decode Tab Toolbar Table 8-5. Decode Tab Toolbar Buttons Button Title Description Two Station Format Toggles the two-station format on and off. The two-station format splits the display into left and right panes, showing traffic between two stations. See Display Setup > General Options on page 192 for details. Show/Hide All Layers Toggles the Show All Layers option on and off. If enabled, the Summary pane shows one line for each protocol level contained in a frame. If disabled, only one line (for the highest enabled protocol level) is shown. Display Setup Displays the Display Setup dialog box. See Setting Display Setup Options on page 191. Automatic Filter Type Selection Use this dropdown to specify which information in the currently selected packet should be used to automatically populate the Define Filter dialog box’s fields when you click the Define Display Filter or Add to Last Filter button. You can populate based on source/destination IP addresses, ports, and MAC addresses. See Using Automatic Display Filters on page 174.
EARLY FIELD TRIAL Table 8-5. Decode Tab Toolbar Buttons Button Title Description Raw Capture Mode Postcapture Analysis Define Display Filter Displays the Define Filter dialog box with settings automatically populated based on the currently selected packet and the setting of the adjacent Filter Type Selection dropdown. See Using Automatic Display Filters on page 174. Add to Last Filter Takes the type of information specified in the Filter Type Selection dropdown from the currently selected packet and adds it to the last filter used in the Define Filter dialog. See Combining Filter Components (“Add to Last Filter”) on page 179 for details. Quick Filter Automatically filters the display based on the selected information in the currently selected packet. For example, if the Filter Type Selection dropdown is set to Connection, clicking Quick Filter will filter the display based on the source/ destination addresses and ports (that is, the connection). Use the Display > Display Setup > Packet Selection tab to specify how Quick Filters will be applied (for example, whether matching packets are returned in a new tab or shown selected in the active tab, and so on). See Using Quick Filters on page 178 for details. User’s Guide 171
- Page 119 and 120: EARLY FIELD TRIAL Using Filters in
- Page 121 and 122: EARLY FIELD TRIAL Reusable Filters
- Page 123 and 124: EARLY FIELD TRIAL Figure 6-2. Apply
- Page 125 and 126: EARLY FIELD TRIAL Working with Auto
- Page 127 and 128: EARLY FIELD TRIAL Table 6-3. Filter
- Page 129 and 130: EARLY FIELD TRIAL Using Filters in
- Page 131 and 132: EARLY FIELD TRIAL Using Pattern Mat
- Page 133 and 134: EARLY FIELD TRIAL Applying Mining F
- Page 135 and 136: EARLY FIELD TRIAL Using Filters in
- Page 137 and 138: EARLY FIELD TRIAL Adaptive Display
- Page 139 and 140: EARLY FIELD TRIAL SECTION 3 Analyzi
- Page 141 and 142: EARLY FIELD TRIAL Adaptive Session
- Page 143 and 144: EARLY FIELD TRIAL Adaptive Mode Pos
- Page 145 and 146: EARLY FIELD TRIAL Adaptive Session
- Page 147 and 148: EARLY FIELD TRIAL Adaptive Session
- Page 149 and 150: EARLY FIELD TRIAL Session Overview
- Page 151 and 152: EARLY FIELD TRIAL Drilling Down to
- Page 153 and 154: EARLY FIELD TRIAL Adaptive Decode V
- Page 155 and 156: EARLY FIELD TRIAL Opening ASP Files
- Page 157 and 158: EARLY FIELD TRIAL Figure 7-9. Openi
- Page 159 and 160: EARLY FIELD TRIAL Using Filters wit
- Page 161 and 162: EARLY FIELD TRIAL Raw Capture Mode
- Page 163 and 164: EARLY FIELD TRIAL Table 8-1. Postca
- Page 165 and 166: EARLY FIELD TRIAL Introducing the P
- Page 167 and 168: EARLY FIELD TRIAL Granularity in De
- Page 169: EARLY FIELD TRIAL Packet Status Fla
- Page 173 and 174: EARLY FIELD TRIAL Types of Display
- Page 175 and 176: EARLY FIELD TRIAL Raw Capture Mode
- Page 177 and 178: EARLY FIELD TRIAL a The “Apply on
- Page 179 and 180: EARLY FIELD TRIAL Raw Capture Mode
- Page 181 and 182: EARLY FIELD TRIAL Raw Capture Mode
- Page 183 and 184: EARLY FIELD TRIAL Raw Capture Mode
- Page 185 and 186: EARLY FIELD TRIAL Using the Manual
- Page 187 and 188: EARLY FIELD TRIAL 5 Click OK. Figur
- Page 189 and 190: EARLY FIELD TRIAL Raw Capture Mode
- Page 191 and 192: EARLY FIELD TRIAL Setting Display S
- Page 193 and 194: EARLY FIELD TRIAL Raw Capture Mode
- Page 195 and 196: EARLY FIELD TRIAL Table 8-9. Summar
- Page 197 and 198: EARLY FIELD TRIAL Raw Capture Mode
- Page 199 and 200: EARLY FIELD TRIAL Searching for Fra
- Page 201 and 202: EARLY FIELD TRIAL Raw Capture Mode
- Page 203 and 204: EARLY FIELD TRIAL Raw Capture Mode
- Page 205 and 206: EARLY FIELD TRIAL Raw Capture Mode
- Page 207 and 208: EARLY FIELD TRIAL Printing Decoded
- Page 209 and 210: EARLY FIELD TRIAL Using the Matrix
- Page 211 and 212: EARLY FIELD TRIAL Raw Capture Mode
- Page 213 and 214: EARLY FIELD TRIAL Using the Host Ta
- Page 215 and 216: EARLY FIELD TRIAL Using the Protoco
- Page 217 and 218: EARLY FIELD TRIAL Enabling VLAN Dat
- Page 219 and 220: EARLY FIELD TRIAL Expert Analysis O
Selecting Packets in the Decode Tab<br />
EARLY FIELD TRIAL Chapter 8<br />
170 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />
You can select individual packets or a group of packets in the summary<br />
pane. Selecting packets allows you to mark key packets that are of<br />
interest to you, so that you can view and use them more easily. You can:<br />
Save the selected packets to a file (Display > Save Selected).<br />
Treat the selected packets as bookmarks, and use F2 to advance<br />
from one selected packet to the next.<br />
Using the Decode Tab Toolbar<br />
The Decode tab provides a toolbar at the top of the window with<br />
shortcuts to useful functionality (Figure 8-4). Each of the buttons in the<br />
toolbar is described in the table that follows.<br />
Figure 8-4. Decode Tab Toolbar<br />
Table 8-5. Decode Tab Toolbar Buttons<br />
Button Title Description<br />
Two Station Format Toggles the two-station format on and off. The<br />
two-station format splits the display into left<br />
and right panes, showing traffic between two<br />
stations. See Display Setup > General Options<br />
on page 192 for details.<br />
Show/Hide All Layers Toggles the Show All Layers option on and off.<br />
If enabled, the Summary pane shows one line<br />
for each protocol level contained in a frame. If<br />
disabled, only one line (for the highest enabled<br />
protocol level) is shown.<br />
Display Setup Displays the Display Setup dialog box. See<br />
Setting Display Setup Options on page 191.<br />
Automatic Filter Type<br />
Selection<br />
Use this dropdown to specify which information<br />
in the currently selected packet should be used<br />
to automatically populate the Define Filter<br />
dialog box’s fields when you click the Define<br />
Display Filter or Add to Last Filter button.<br />
You can populate based on source/destination<br />
IP addresses, ports, and MAC addresses.<br />
See Using Automatic Display Filters on page<br />
174.