Sniffer® Portable Professional User's Guide - NetScout

Chapter 9
4 Click OK.
214 Sniffer Portable Professional
Real Time Decodes and the “When buffer is full” Option
Real Time Decodes only work when the When buffer is full option in
the Define Filter - Capture dialog box is set to Stop capture for the
active capture filter.
If the Real Time Decode option is enabled and the capture buffer is
currently set to wrap (Wrap buffer is enabled), Sniffer Portable
Professional will automatically change the setting of the option to Stop
capture.
After starting a new capture session, the Real-Time Decode window is
displayed automatically. An example is shown in Figure 9-1 on page 215.
Viewing Real-time Decodes
Real-time decodes allow you to display protocol decodes in real-time as
packets arrive. When enabled, you do not have to stop a capture session
to see protocol decodes.
To view real-time decodes:
1 Ensure real-time decodes are enabled. See Enabling and Setting
Real-time Decodes on page 213.
2 Select Start from the Capture menu.
3 The Decode window opens and the real-time decodes are displayed
in the Summary pane as shown in the example in Figure 9-1 on
page 215. Depending on the refresh interval specified, you might
not see the decode information immediately.
NOTE: Switch from Non-live to Live scrolling at any time using
Ctrl + End, or clicking and .
4 Select Stop from the Capture menu to stop the capture and the
real-time decode data stream. Save the data to a trace file using
traditional file saving methods if desired.