Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout Sniffer Adaptive Application Analyzer: Adaptive Mode ... - NetScout

10.03.2013 Views

EARLY FIELD TRIAL Chapter 8 Multiple Filter Mode and Exclude Filters 182 Sniffer Adaptive Application Analyzer When combining multiple filters in Multiple Filter Mode,Sniffer Adaptive Application Analyzer joins the filter with a logical OR rather than an AND. Because of this, joining multiple Exclude filters will always result in ALL packets passing the filter and being returned. Consider the following examples: Combing Include Filters in Multiple Filter Mode For example, suppose you set up the following filters: Filter 1 includes all packets of type A Filter 2 includes all packets of type B Combining these filters in Multiple Filter Mode and applying them to a trace file with packets of type A,B and C, will result in a filtered display with just packets of Type A and B. Combing Exclude Filters in Multiple Filter Mode Now, let’s apply the same logic to Exclude filters: Filter 1 excludes all packets of type A Filter 2 excludes all packets of type B Combining these filters in Multiple Filter Mode and applying them to a trace file with packets of type A,B and C, will result in a filtered display with packets of Type A, B, and C – all packets will pass the filter. This happens because the Exclude filters are joined with an OR condition between the filters. For a packet to be excluded from the filtered display, both the conditions must return FALSE. If even one condition returns TRUE, the packet gets included. The Boolean logic for this is: Not (Filter A or Filter B) = Not Filter A AND Not Filter B.

EARLY FIELD TRIAL Raw Capture Mode Postcapture Analysis Saving Sets of Filtered Frames / Creating New Windows You can save sets of filtered frames by selecting File > Save As with a filtered tab selected. A new window is created with the set of filtered frames in it, followed by the appearance of the Save As dialog box. When you use the Save As command on a set of filtered frames, the filtered frames in the new window are renumbered sequentially with new sequence numbers - the original sequence numbers are not preserved. You can also create new windows for filtered sets of frames by rightclicking a filtered tab and selecting the Create New Window command. A new postcapture window with just the filtered frames will appear. For a description of how to define a filter, see Using Manual Filters (Display > Define Filter) on page 183. Using Manual Filters (Display > Define Filter) This section describes how to use the Display Filter dialog box to create, manage, and apply manual display filters. Each time you create a new filter, you start by clicking the Profiles button in the Define Filter dialog box (Display > Define Filter). Then, click the New button to open a dialog that lets you assign the filter a profile name. Once you have successfully created a filter profile, it will appear in the Settings For panel so you can fine tune and apply the filter whenever you like. To create a filter profile: 1 Go to Display > Define Filter and the Define Filter dialog box appears. or Click the Define Filter icon 2 Click the Profiles button. The Capture Profiles dialog box appears, listing the filter profiles previously defined. User’s Guide 183

EARLY FIELD TRIAL<br />

Raw Capture <strong>Mode</strong> Postcapture Analysis<br />

Saving Sets of Filtered Frames / Creating New Windows<br />

You can save sets of filtered frames by selecting File > Save As with a<br />

filtered tab selected. A new window is created with the set of filtered<br />

frames in it, followed by the appearance of the Save As dialog box.<br />

When you use the Save As command on a set of filtered frames, the<br />

filtered frames in the new window are renumbered sequentially with new<br />

sequence numbers - the original sequence numbers are not preserved.<br />

You can also create new windows for filtered sets of frames by rightclicking<br />

a filtered tab and selecting the Create New Window command.<br />

A new postcapture window with just the filtered frames will appear.<br />

For a description of how to define a filter, see Using Manual Filters<br />

(Display > Define Filter) on page 183.<br />

Using Manual Filters (Display > Define Filter)<br />

This section describes how to use the Display Filter dialog box to create,<br />

manage, and apply manual display filters.<br />

Each time you create a new filter, you start by clicking the Profiles<br />

button in the Define Filter dialog box (Display > Define Filter). Then,<br />

click the New button to open a dialog that lets you assign the filter a<br />

profile name. Once you have successfully created a filter profile, it will<br />

appear in the Settings For panel so you can fine tune and apply the<br />

filter whenever you like.<br />

To create a filter profile:<br />

1 Go to Display > Define Filter and the Define Filter dialog box<br />

appears.<br />

or<br />

Click the Define Filter icon<br />

2 Click the Profiles button.<br />

The Capture Profiles dialog box appears, listing the filter profiles<br />

previously defined.<br />

User’s Guide 183

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!