Sniffer® Portable Professional User's Guide - NetScout

Chapter 10
240 Sniffer Portable Professional
1 From the Display menu, select Define Filter.
2 Follow the Define Filter procedure (Defining Filters on page 220).
The links to topics describing how to create various capture filters
are applicable to defining a display filter.
3 From the Display menu, choose Select Filter to apply your new
filter to the current display.
Filtering from the Decode Window
This release provides a variety of new features for filtering from a
Decode tab. You can:
Select a packet in the Decode tab’s Summary pane and click the
Define Filter button to automatically populate the Define Filter
dialog box with some of its components (connection information,
source port/address, destination port/address, and so on).
Add a new filter component to the previous filter by selecting a
packet in the Summary tab and clicking Add to Last Filter button.
Use the Quick Filter button to automatically filter the display based
on the selected information in the currently selected packet (Quick
Filters do not display the Define Filter - Display dialog box as
automatic filters do).
Specify whether Display filters return results by selecting/clearing
packets in the active tab or by creating a new tab of filtered
packets.
Apply Display filters to all packets or only selected packets.
These features are described in detail starting in Postcapture Decode
Display on page 162. In particular, see the following topics:
Using the Decode Tab Toolbar on page 165
Setting Display Filters on page 167
Using Automatic Display Filters on page 168
Using Quick Filters on page 172
Combining Filter Components (“Add to Last Filter”) on page 173
Selecting Filters / Combining Multiple Filters on page 174
Saving Sets of Filtered Frames / Creating New Windows on page
177