Sniffer® Portable Professional User's Guide - NetScout

Chapter 8
168 Sniffer Portable Professional
Quick Display Filters
Quick Display Filters are similar to automatic display filters – they filter
the active Decode tab based on selected portions of the currently
selected packet in the Decode tab. The main difference is that they take
effect immediately without displaying the Define Filter dialog box first.
You set Quick Filters by using the dropdown at the top of the Decode tab
to specify which portion of the selected packet you want to use as a filter
(for example, just the source port) and clicking the Quick Filter button.
NOTE: You set global options for how Quick Filters are applied in
the Display > Display Setup > Packet Selection tab. These options
specify to which packets Quick Filters should be applied (all or
selected) and how results should be returned (by selecting/clearing
packets in the active tab or by showing a new filtered tab at the
base of the postcapture display window).
Automatic Expert Filters
You can also set automatic Expert filters that only display data
associated with a particular network object, symptom, or diagnosis. You
do this by displaying the Expert tab, selecting an object, symptom, or
diagnosis and clicking the Display Filter button.
See Setting Automatic Expert Display Filters on page 151.
Using Automatic Display Filters
You can automatically populate the Define Filter - Display dialog box’s
tabs with filter settings based on selected portions of the currently
selected packet in the Decode tab.
To set an automatic display filter:
1 In a Decode tab, select the packet to use as a filter source.
2 Use the Automatic Filter Type Selection dropdown in the
Decode toolbar to specify which portion of the packet you want to
use as a filter (Figure 8-4).