Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

10.03.2013 Views

Selecting Packets in the Decode Tab EARLY FIELD TRIAL Chapter 8 170 Sniffer Adaptive Application Analyzer You can select individual packets or a group of packets in the summary pane. Selecting packets allows you to mark key packets that are of interest to you, so that you can view and use them more easily. You can: Save the selected packets to a file (Display > Save Selected). Treat the selected packets as bookmarks, and use F2 to advance from one selected packet to the next. Using the Decode Tab Toolbar The Decode tab provides a toolbar at the top of the window with shortcuts to useful functionality (Figure 8-4). Each of the buttons in the toolbar is described in the table that follows. Figure 8-4. Decode Tab Toolbar Table 8-5. Decode Tab Toolbar Buttons Button Title Description Two Station Format Toggles the two-station format on and off. The two-station format splits the display into left and right panes, showing traffic between two stations. See Display Setup > General Options on page 192 for details. Show/Hide All Layers Toggles the Show All Layers option on and off. If enabled, the Summary pane shows one line for each protocol level contained in a frame. If disabled, only one line (for the highest enabled protocol level) is shown. Display Setup Displays the Display Setup dialog box. See Setting Display Setup Options on page 191. Automatic Filter Type Selection Use this dropdown to specify which information in the currently selected packet should be used to automatically populate the Define Filter dialog box’s fields when you click the Define Display Filter or Add to Last Filter button. You can populate based on source/destination IP addresses, ports, and MAC addresses. See Using Automatic Display Filters on page 174.

EARLY FIELD TRIAL Table 8-5. Decode Tab Toolbar Buttons Button Title Description Raw Capture Mode Postcapture Analysis Define Display Filter Displays the Define Filter dialog box with settings automatically populated based on the currently selected packet and the setting of the adjacent Filter Type Selection dropdown. See Using Automatic Display Filters on page 174. Add to Last Filter Takes the type of information specified in the Filter Type Selection dropdown from the currently selected packet and adds it to the last filter used in the Define Filter dialog. See Combining Filter Components (“Add to Last Filter”) on page 179 for details. Quick Filter Automatically filters the display based on the selected information in the currently selected packet. For example, if the Filter Type Selection dropdown is set to Connection, clicking Quick Filter will filter the display based on the source/ destination addresses and ports (that is, the connection). Use the Display > Display Setup > Packet Selection tab to specify how Quick Filters will be applied (for example, whether matching packets are returned in a new tab or shown selected in the active tab, and so on). See Using Quick Filters on page 178 for details. User’s Guide 171

Selecting Packets in the Decode Tab<br />

EARLY FIELD TRIAL Chapter 8<br />

170 <strong>Sniffer</strong> <strong>Adaptive</strong> <strong>Application</strong> <strong>Analyzer</strong><br />

You can select individual packets or a group of packets in the summary<br />

pane. Selecting packets allows you to mark key packets that are of<br />

interest to you, so that you can view and use them more easily. You can:<br />

Save the selected packets to a file (Display > Save Selected).<br />

Treat the selected packets as bookmarks, and use F2 to advance<br />

from one selected packet to the next.<br />

Using the Decode Tab Toolbar<br />

The Decode tab provides a toolbar at the top of the window with<br />

shortcuts to useful functionality (Figure 8-4). Each of the buttons in the<br />

toolbar is described in the table that follows.<br />

Figure 8-4. Decode Tab Toolbar<br />

Table 8-5. Decode Tab Toolbar Buttons<br />

Button Title Description<br />

Two Station Format Toggles the two-station format on and off. The<br />

two-station format splits the display into left<br />

and right panes, showing traffic between two<br />

stations. See Display Setup > General Options<br />

on page 192 for details.<br />

Show/Hide All Layers Toggles the Show All Layers option on and off.<br />

If enabled, the Summary pane shows one line<br />

for each protocol level contained in a frame. If<br />

disabled, only one line (for the highest enabled<br />

protocol level) is shown.<br />

Display Setup Displays the Display Setup dialog box. See<br />

Setting Display Setup Options on page 191.<br />

Automatic Filter Type<br />

Selection<br />

Use this dropdown to specify which information<br />

in the currently selected packet should be used<br />

to automatically populate the Define Filter<br />

dialog box’s fields when you click the Define<br />

Display Filter or Add to Last Filter button.<br />

You can populate based on source/destination<br />

IP addresses, ports, and MAC addresses.<br />

See Using Automatic Display Filters on page<br />

174.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!