Sniffer® Portable Professional User's Guide - NetScout

Defining Filters and Triggers
20 Click Set Data to tell Sniffer Portable Professional to fill in a dummy
data pattern (a placeholder) for the Dest Subnet and click OK.
21 Click OK again in the Define Filter dialog box to save the filter.
22 Select the next packet containing the destination IP subnet address
from the Packet Display.
23 From the main toolbar, click to open the Define Filter dialog
box for My Subnet.
24 Click the Data Pattern tab to display the Data Pattern filter
defined so far.
25 Highlight the second PAT (this was the placeholder created
previously) and click Edit Pattern to open the Edit Pattern dialog
box.
26 Scroll the detail decode window to locate the IP destination address
containing subnet 35.56.0. Highlight the field.
27 Select Protocol in the From list box. This will tell Sniffer Portable
Professional to calculate the destination IP address offset from the
beginning of the IP protocol data packet.
28 Click the Set Data button to tell Sniffer Portable Professional to fill
in the source IP address field.
29 Change Len (length of subnet) from 4 to 3, and delete the 4th octet
from the data pattern field.
30 Edit the Name field, so it shows Dest Subnet 36.56.0.
31 Click OK. A second data pattern Dest Subnet 36.56.0 is created
and connected to the OR operator.
32 Click Evaluate. The resulting operation Not (Src Subnet 36.56.0
OR Dest Subnet 36.56.0) is shown on the top line.
33 Click OK to save the filter.
Setting Filter Options in the Advanced Tab
Use options on the Advanced tab to define a filter based on packet size,
protocol type, or error type.
You can specify packets that are equal to, greater than, or less than a
specific packet size, or in a range or outside of a range of packet sizes.
You can select one or more protocols or subprotocols to act as a filter. If
the packet matches one of the selected protocol types, it will pass
through the filter. (If no protocol is selected, Sniffer Portable
Professional captures all protocol types.)
User’s Guide 235