Sniffer® Portable Professional User's Guide - NetScout

Setting Filter Options in the Address Tab
Defining Filters and Triggers
Use the options on the Address tab of the Define Filter dialog box to set
up a filter to capture or display packets between up to ten pairs of
network nodes by their addresses.
To set an Address filter:
1 Click the Address tab from the Define Filter dialog box.
2 Use the Address Type drop-down list to specify the type of
address on which you want to filter.
3 Use the Mode field to specify whether you want to Include or
Exclude the specified traffic.
4 The Known Address box includes addresses already known to
Sniffer Portable Professional (including those in your Address
Book). You can click and drag addresses from the Known Address
box into the Station 1 or Station 2 fields to filter on these
addresses. If you do not want to click and drag known addresses,
you can also manually add addresses by placing your cursor in the
appropriate field and typing the address.
NOTE: You can use a wild card symbol (*) in the third or
fourth octet of the address in Station 1 and Station 2. For
example, manually enter 10.20.*.* when IP is selected as
Address Type. If you have selected Hardware as the
Address Type, enter hardware addresses in the Station 1
and Station 2 fields as desired. Example: 0050da*.
5 You can use the adjacent / column to enter a subnet mask in CIDR
format. See Using CIDR Bit-Count Netmasks in the Address Tab on
page 226 for more information on this format.
6 Once you have specified the address pair on which you want to
filter, click the Dir button to specify in which directions you want to
capture traffic (from Station 1 to Station 2, from Station 2 to
Station 1, or in both directions).
7 Click OK.
Figure 10-2 shows the Address tab of the Filter Settings dialog box.
User’s Guide 225