Sniffer® Portable Professional User's Guide - NetScout

Chapter 8
Searching for Frames in the Decode Display
186 Sniffer Portable Professional
Because the Decode display can include thousands and thousands of
frames, it can be useful to search for particular frames. Using the
Sniffer’s powerful search abilities, you can search for frames in the
Decode display that match a text string, a certain data pattern, a certain
status flag, or have an Expert symptom or diagnosis associated with
them.
NOTE: In addition to searching for frames, you can also advance to
a particular frame in the Decode tab by specifying its number. Do
this by selecting the Go to Frame command from the Display menu
and supplying the frame number in the dialog box that appears.
Use the Find Frame dialog box to search for frames. Display the Find
Frame dialog box using any of the following commands:
Select Find Frame from the Display menu.
Select Find Frame from the Decode tab’s context menu (activated
by right-clicking anywhere on the Decode tab).
Use the Alt-F3 keyboard shortcut.
The Find Frame dialog box contains the following tabs:
Text — The Text tab lets you search for frames containing a
specified text string.
Time — The Time tab lets you search for frames with specific text
in the delta, relative, or absolute time fields.
Data — The Data tab lets you search for frames containing a
specified data pattern.
Status — The Status tab lets you search for frames with a
particular status flag.
Expert — The Expert tab lets you search for frames with a
particular associated Expert symptom or diagnosis.
The following sections describe how to perform searches from each of
these tabs.