Sniffer® Portable Professional User's Guide - NetScout

Sniffer® Portable Professional User's Guide - NetScout Sniffer® Portable Professional User's Guide - NetScout

10.03.2013 Views

Chapter 10 5 Click OK. 246 Sniffer Portable Professional 6 Mark the Event Filter check box, and select a defined filter from the drop-down list. In our example, we've previously created a filter named Telnet Packet and selected it as the Event Filter in the Start Trigger dialog box. 7 Click OK. Alternatively, you may use Date/Time or Alarm as the trigger. Enter the time, and select each weekday of your choice by clicking on the button to toggle its ON/OFF state. A floating button means OFF; a sinking button means ON. If you are interested in using network traffic load to trigger capture, select Alarms and the individual network variables as the trigger. 8 Select a capture filter profile from the Capture Filter pull-down menu. The capture filter selected here will be used as the capture filter when the start trigger activates the capture. 9 Mark the Enable check box of the Stop Trigger section, and click Define. 10 Click New, and define a new stop trigger Stop Trigger Sample and click OK. 11 Select the Time check box. Specify Stop after 3600 seconds from start as the first stop trigger. Mark the Event filter check box, and select IP Address as the second stop trigger. Then click OK. 12 Enter Capture 3000 packets after stop trigger happened. Click OK. The trigger appears as in the figure below. Figure 10-10. Sample Trigger

Trigger Entries in Alarm Log Defining Filters and Triggers Sniffer Portable Professional will log information related to trigger event detection and captures started\stopped based on trigger event detection to the local Alarm Log. Alarms logged for trigger events typically include the time the capture started, the types of trigger event(s) specified for both Start and Stop triggers, and a variety of other configuration information summarizing the trigger definitions. User’s Guide 247

Chapter 10<br />

5 Click OK.<br />

246 Sniffer <strong>Portable</strong> <strong>Professional</strong><br />

6 Mark the Event Filter check box, and select a defined filter from<br />

the drop-down list. In our example, we've previously created a<br />

filter named Telnet Packet and selected it as the Event Filter in<br />

the Start Trigger dialog box.<br />

7 Click OK. Alternatively, you may use Date/Time or Alarm as the<br />

trigger. Enter the time, and select each weekday of your choice by<br />

clicking on the button to toggle its ON/OFF state. A floating button<br />

means OFF; a sinking button means ON. If you are interested in<br />

using network traffic load to trigger capture, select Alarms and the<br />

individual network variables as the trigger.<br />

8 Select a capture filter profile from the Capture Filter pull-down<br />

menu. The capture filter selected here will be used as the capture<br />

filter when the start trigger activates the capture.<br />

9 Mark the Enable check box of the Stop Trigger section, and click<br />

Define.<br />

10 Click New, and define a new stop trigger Stop Trigger Sample<br />

and click OK.<br />

11 Select the Time check box. Specify Stop after 3600 seconds<br />

from start as the first stop trigger. Mark the Event filter check<br />

box, and select IP Address as the second stop trigger. Then click<br />

OK.<br />

12 Enter Capture 3000 packets after stop trigger happened. Click<br />

OK.<br />

The trigger appears as in the figure below.<br />

Figure 10-10. Sample Trigger

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!