Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout Sniffer® Portable Professional User's Guide - NetScout
Chapter 6 Capturing from Specific Stations (Visual Filters) 1. Select station (turns blue) 2. Click Capture You can see the progress of the capture on the status line of the main Sniffer Portable Professional window, or on the Capture Panel 128 Sniffer Portable Professional To capture packets for a particular station, select the station from the monitor’s host table display. To capture packets between two specific stations, select one of the stations from the monitor’s matrix display. Then, click . (To view the host table or matrix table, select Host Table or Matrix from the Monitor menu, or use a toolbar button.) Figure 6-3 shows an example of how to capture from a single station in the host table. The following procedure provides the details: To capture packets between two specific stations: 1 Display the Matrix (Monitor > Matrix) in the tabular view. 2 Select one of the conversations in the display. 3 Click the Quick Capture button in the Matrix’s toolbar. In response, a capture starts with an automatic Quick Capture filter set up to include just traffic between the two selected stations. The following example illustrates capturing from a single station in the host table. After the selected station turns blue, click the Capture button from the vertical toolbar. The capture progress appears in the main window, or on the Capture Panel. Figure 6-3. Single-Station Capture from the Host Table
Capture Filters Capture Triggers Capturing Packets You can define filters to capture only the particular packets you need, so that you can focus on the data necessary for troubleshooting network problems. When you apply a filter to the capture process it is called a capture filter. A capture filter allows only certain frames to be saved in the capture buffer. For a description of how to define a filter, see Defining Filters and Triggers on page 219. The trigger feature allows you to start and stop captures based on date and time, alarms, and specific network events. Use triggers to capture data while Sniffer Portable Professional is unattended, such as on off-hours or weekends, or to start captures when specific events occur, such as alarm conditions. For a description of how to define a capture trigger, see Defining Triggers on page 242. User’s Guide 129
- Page 78 and 79: Chapter 5 78 Sniffer Portable Profe
- Page 80 and 81: Chapter 5 80 Sniffer Portable Profe
- Page 82 and 83: Chapter 5 Host Table 82 Sniffer Por
- Page 84 and 85: Chapter 5 84 Sniffer Portable Profe
- Page 86 and 87: Chapter 5 86 Sniffer Portable Profe
- Page 88 and 89: Chapter 5 Viewing Access Points Onl
- Page 90 and 91: Chapter 5 90 Sniffer Portable Profe
- Page 92 and 93: Chapter 5 Selecting Wireless Host T
- Page 94 and 95: Chapter 5 94 Sniffer Portable Profe
- Page 96 and 97: Chapter 5 Setting Capture Filters f
- Page 98 and 99: Chapter 5 98 Sniffer Portable Profe
- Page 100 and 101: Chapter 5 ART - The Server-Client R
- Page 102 and 103: Chapter 5 Show Options 102 Sniffer
- Page 104 and 105: Chapter 5 ART Options - Servers Onl
- Page 106 and 107: Chapter 5 106 Sniffer Portable Prof
- Page 108 and 109: Chapter 5 Adding Custom Protocols t
- Page 110 and 111: Chapter 5 History Samples Click to
- Page 112 and 113: Chapter 5 112 Sniffer Portable Prof
- Page 114 and 115: Chapter 5 Protocol Distribution 114
- Page 116 and 117: Chapter 5 Global Statistics 116 Sni
- Page 118 and 119: Chapter 5 118 Sniffer Portable Prof
- Page 120 and 121: Chapter 5 Monitor Alarms 120 Sniffe
- Page 122 and 123: Chapter 6 Capture Controls 122 Snif
- Page 124 and 125: Chapter 6 Capture Buffer 124 Sniffe
- Page 126 and 127: Chapter 6 Tips: 126 Sniffer Portabl
- Page 130 and 131: Chapter 6 130 Sniffer Portable Prof
- Page 132 and 133: Chapter 7 132 Sniffer Portable Prof
- Page 134 and 135: Chapter 7 Setting Expert Options 13
- Page 136 and 137: Chapter 7 136 Sniffer Portable Prof
- Page 138 and 139: Chapter 7 Expert Subnet Mask Settin
- Page 140 and 141: Chapter 7 140 Sniffer Portable Prof
- Page 142 and 143: Chapter 7 142 Sniffer Portable Prof
- Page 144 and 145: Chapter 7 Discovered access points
- Page 146 and 147: Chapter 7 146 Sniffer Portable Prof
- Page 148 and 149: Chapter 7 148 Sniffer Portable Prof
- Page 150 and 151: Chapter 7 Expert Oracle Options 150
- Page 152 and 153: Chapter 7 Limitations of the Expert
- Page 154 and 155: Chapter 7 Click to show the packet
- Page 156 and 157: Chapter 7 156 Sniffer Portable Prof
- Page 158 and 159: Chapter 8 Displaying Captured Packe
- Page 160 and 161: Chapter 8 Postcapture Views for Wir
- Page 162 and 163: Chapter 8 162 Sniffer Portable Prof
- Page 164 and 165: Chapter 8 164 Sniffer Portable Prof
- Page 166 and 167: Chapter 8 Table 8-3. Decode Tab Too
- Page 168 and 169: Chapter 8 168 Sniffer Portable Prof
- Page 170 and 171: Chapter 8 b 170 Sniffer Portable Pr
- Page 172 and 173: Chapter 8 a 172 Sniffer Portable Pr
- Page 174 and 175: Chapter 8 174 Sniffer Portable Prof
- Page 176 and 177: Chapter 8 176 Sniffer Portable Prof
Capture Filters<br />
Capture Triggers<br />
Capturing Packets<br />
You can define filters to capture only the particular packets you need, so<br />
that you can focus on the data necessary for troubleshooting network<br />
problems.<br />
When you apply a filter to the capture process it is called a capture filter.<br />
A capture filter allows only certain frames to be saved in the capture<br />
buffer. For a description of how to define a filter, see Defining Filters and<br />
Triggers on page 219.<br />
The trigger feature allows you to start and stop captures based on date<br />
and time, alarms, and specific network events. Use triggers to capture<br />
data while Sniffer <strong>Portable</strong> <strong>Professional</strong> is unattended, such as on<br />
off-hours or weekends, or to start captures when specific events occur,<br />
such as alarm conditions.<br />
For a description of how to define a capture trigger, see Defining<br />
Triggers on page 242.<br />
User’s <strong>Guide</strong> 129