Sniffer® Portable Professional User's Guide - NetScout

Defining Filters and Triggers
Overview
This section describes filters and triggers:
10
Use filters to select the particular traffic you need for your network
analysis so that you can focus precisely on the data you need to
troubleshoot network problems and minimize the size of files you
collect for historical records.
Use triggers to capture data while Sniffer Portable Professional is
unattended, such as on off-hours or weekends. You can set triggers
to start captures at specific times, or in response to specific events
(for example, alarms).
The section includes the following information:
Defining Filters on page 220
Using Filter Profiles on page 222
Setting Filter Options in the Address Tab on page 225
Setting Filter Options in the Port Tab on page 228
Setting Filter Options in the Data Pattern Tab on page 230
Setting Filter Options in the Advanced Tab on page 235
Setting Filter Options in the 802.11 Tab on page 238
Filtering from the Decode Window on page 240
Sharing Filters between Systems and Products on page 241
Defining Triggers on page 242
Defined Filters vs. Automatic Filters
There are two categories of filters:
Defined filters. You can define address, port, protocol, and
Boolean data pattern filters to select the particular traffic you need
for your network analysis. By using filters, you can precisely focus
on the data you need to troubleshoot network problems and
minimize the size of files you collect for historical records.
User’s Guide 219