Sniffer® Portable Professional User's Guide - NetScout

Chapter 7
Limitations of the Expert Filter
152 Sniffer Portable Professional
The Expert filter has the following limitations:
Some symptoms and diagnoses, such as Broadcast storm, have
no associated network object on which the analyzer can filter. In
those cases, the Define Filter button will not appear at the upper
left of the display, indicating that an Expert filter cannot be set.
Expert filters are not supported on objects at the Multicast layer.
Expert filters support a maximum of 10 objects. Make sure you
have selected no more than 10 objects before using this feature.
Occasionally you will see the message:
No frames are eligible for display
This message appears when one or more of the following conditions
exist:
The highlighted object has not sent or received a frame
The highlighted object has been filtered out by a standard
Display filter
Other Notes About Expert Filters
The Expert analyzer uses several algorithms to decide which frames are
associated with a network object. Sometimes, these algorithms may
eliminate frames you consider relevant.
Certain maintenance frames may not be shown. For example, if
you set an Expert filter on a Novell Netware connection-layer
connection, the Expert analyzer would show all those related
frames with NCP layers, but would not show certain connection
maintenance frames it considers irrelevant.
When you set a filter on a connection object, the frame that
initiates the connection is not shown. This is because Expert does
not create a connection object until the connection is completed.
When you filter on an application object, TCP continuation frames
are not shown.