Sniffer® Portable Professional User's Guide - NetScout

Expert IP Options
Real-Time Expert Display
Use the IP Options tab to exclude specified IP addresses from
consideration for the Expert’s Duplicate Network Address alarm. The
Expert will not generate Duplicate Network Address alarms for the IP
addresses listed in this tab.
Use this tab as follows:
Click Add and supply an address to add a new IP address to the list
of exclusions.
Select an entry and click Delete to remove the selected IP Address
from the list.
Modify entries by selecting them and editing as necessary.
Setting Automatic Expert Display Filters
You can use Expert display filters to automatically display all traffic in the
capture buffer related to a specific:
Network object
Symptom or diagnosis
You apply an Expert display filter by selecting a network object,
symptom, or diagnosis in the summary pane of the Expert window and
clicking the Define Filter button in the upper left corner of the Expert
window. In response, the Expert adds a new tab to the display window
(titled Filtered xx, where xx is the sequential number of the filter you
applied) containing just those frames associated with the selected
network object, symptom, or diagnosis.
The frames may be displayed with skipped frame numbers on the
Filtered tab, because the network object filter does not change the
frame numbers of frames it selects for display. Thus, you may see frame
30 followed by frame 35 because the network object filter excluded
frames 31-34. If you save the filtered frames as a new file (using the
Save As) command, the Sniffer Portable Professional will renumber the
filtered frames with sequential numbers.
IMPORTANT: Expert filters support a maximum of 10 objects. Make
sure you have selected no more than 10 objects before using this
feature.
User’s Guide 151