Sniffer® Portable Professional User's Guide - NetScout

Chapter 8
Searching for Data Patterns using a Pattern from a Known
Packet
192 Sniffer Portable Professional
In addition to Searching for Frames Matching Data Patterns, the easiest
way to search for a data pattern is to use a pattern from a known packet.
To search for data patterns using a pattern from a known
packet:
1 Locate and highlight either:
A packet in the Summary pane.
A protocol field or a data pattern in the Detail pane.
2 Open the Find Frame dialog box by selecting the Find Frame
command from the Display menu (or from the context menu).
3 Select the Data tab.
If you selected a packet in the Summary pane, the Data tab
will already contain some data from the selected packet.
If you selected a protocol field or data pattern in the Detail
pane, the Data tab will already contain the selected field or
pattern.
4 Set the From list box to Don’t Care.
5 You can click the Set Data button to open the Set Data dialog box,
containing a line-by-line decode of the selected packet.
Figure 8-14. The Set Data Dialog Box
6 Select a line from the Set Data dialog box and click OK.
7 The data from the selected line is placed in the data pattern area
of the Find Frame dialog box. Adjust the data and the length if
necessary