Sniffer® Portable Professional User's Guide - NetScout

Chapter 10
244 Sniffer Portable Professional
a Click New to create a new trigger.
b Enable the Date/Time option to select a specific date and
time as the trigger event.
c Enable the Alarms option to select a particular type of Monitor
Alarm as the trigger event. The thresholds for monitor alarms
are specified in the Tools > Options > MAC Threshold tab.
d Enable the Event filter option to select a Filter Profile as the
trigger event. The dropdown automatically lists all configured
Filter Profiles. When Sniffer Portable Professional detects a
packet matching the selected filter’s definitions, capture will
either start or stop (depending on what type of trigger you are
setting up).
For example, if you want to start a capture triggered by a
particular IP address, you can accomplish this by defining an
IP address filter with your known IP address in the Station 1
field and Any in the Station 2 field, with the Dir set
appropriately. Then, you can use this filter as the Event
filter for the Start Trigger.
e Click OK to close the Start Trigger or Stop Trigger dialog box.
Figure 10-9. Start Trigger Dialog Box
4 In the Trigger Setup dialog box (Figure 10-8):
a For Start Triggers, use the Capture Filter option to select
what capture filter to use when the trigger event is detected
and capture starts.
a For Stop Triggers, specify the number of packets to capture
after the Stop trigger event in the field provided.