Sniffer® Portable Professional User's Guide - NetScout
Sniffer® Portable Professional User's Guide - NetScout Sniffer® Portable Professional User's Guide - NetScout
Chapter 10 5 Click OK. 246 Sniffer Portable Professional 6 Mark the Event Filter check box, and select a defined filter from the drop-down list. In our example, we've previously created a filter named Telnet Packet and selected it as the Event Filter in the Start Trigger dialog box. 7 Click OK. Alternatively, you may use Date/Time or Alarm as the trigger. Enter the time, and select each weekday of your choice by clicking on the button to toggle its ON/OFF state. A floating button means OFF; a sinking button means ON. If you are interested in using network traffic load to trigger capture, select Alarms and the individual network variables as the trigger. 8 Select a capture filter profile from the Capture Filter pull-down menu. The capture filter selected here will be used as the capture filter when the start trigger activates the capture. 9 Mark the Enable check box of the Stop Trigger section, and click Define. 10 Click New, and define a new stop trigger Stop Trigger Sample and click OK. 11 Select the Time check box. Specify Stop after 3600 seconds from start as the first stop trigger. Mark the Event filter check box, and select IP Address as the second stop trigger. Then click OK. 12 Enter Capture 3000 packets after stop trigger happened. Click OK. The trigger appears as in the figure below. Figure 10-10. Sample Trigger
Trigger Entries in Alarm Log Defining Filters and Triggers Sniffer Portable Professional will log information related to trigger event detection and captures started\stopped based on trigger event detection to the local Alarm Log. Alarms logged for trigger events typically include the time the capture started, the types of trigger event(s) specified for both Start and Stop triggers, and a variety of other configuration information summarizing the trigger definitions. User’s Guide 247
- Page 196 and 197: Chapter 8 Printing Decoded Packets
- Page 198 and 199: Chapter 8 Using Protocol Forcing Yo
- Page 200 and 201: Chapter 8 Sniffer Portable Professi
- Page 202 and 203: Chapter 8 Postcapture Matrix Tab 20
- Page 204 and 205: Chapter 8 More about the Matrix Tra
- Page 206 and 207: Chapter 8 Postcapture Host Table Ta
- Page 208 and 209: Chapter 8 Postcapture Protocol Dist
- Page 210 and 211: Chapter 8 Postcapture Statistics Ta
- Page 212 and 213: Chapter 8 212 Sniffer Portable Prof
- Page 214 and 215: Chapter 9 4 Click OK. 214 Sniffer P
- Page 216 and 217: Chapter 9 216 Sniffer Portable Prof
- Page 218 and 219: Chapter 9 218 Sniffer Portable Prof
- Page 220 and 221: Chapter 10 220 Sniffer Portable Pro
- Page 222 and 223: Chapter 10 Using a Defined Filter U
- Page 224 and 225: Chapter 10 224 Sniffer Portable Pro
- Page 226 and 227: Chapter 10 Drag and drop a symbolic
- Page 228 and 229: Chapter 10 Setting Filter Options i
- Page 230 and 231: Chapter 10 Setting Filter Options i
- Page 232 and 233: Chapter 10 Add or Edit Pattern Dial
- Page 234 and 235: Chapter 10 234 Sniffer Portable Pro
- Page 236 and 237: Chapter 10 Specify one or more netw
- Page 238 and 239: Chapter 10 Setting Filter Options i
- Page 240 and 241: Chapter 10 240 Sniffer Portable Pro
- Page 242 and 243: Chapter 10 242 Sniffer Portable Pro
- Page 244 and 245: Chapter 10 244 Sniffer Portable Pro
- Page 248 and 249: Chapter 10 248 Sniffer Portable Pro
- Page 250 and 251: Chapter 11 Description 250 Sniffer
- Page 252 and 253: Chapter 11 Entering Names Manually
- Page 254 and 255: Chapter 11 Click to resolve the Dom
- Page 256 and 257: Chapter 11 256 Sniffer Portable Pro
- Page 258 and 259: Chapter 12 Type of node triggering
- Page 260 and 261: Chapter 12 Setting Alarm Severity L
- Page 262 and 263: Chapter 12 Logging and Severities f
- Page 264 and 265: Chapter 12 Setting Alarm Notificati
- Page 266 and 267: Chapter 12 266 Sniffer Portable Pro
- Page 268 and 269: Chapter 13 268 Sniffer Portable Pro
- Page 270 and 271: Chapter 13 Creating Sniffer Monitor
- Page 272 and 273: Chapter 13 272 Sniffer Portable Pro
- Page 274 and 275: Capture panel, 123 Capture triggers
- Page 276 and 277: zooming, Host Table 111 display tab
- Page 278 and 279: Resolve name on Network address, Re
- Page 280: 280 Sniffer Portable Professional
Chapter 10<br />
5 Click OK.<br />
246 Sniffer <strong>Portable</strong> <strong>Professional</strong><br />
6 Mark the Event Filter check box, and select a defined filter from<br />
the drop-down list. In our example, we've previously created a<br />
filter named Telnet Packet and selected it as the Event Filter in<br />
the Start Trigger dialog box.<br />
7 Click OK. Alternatively, you may use Date/Time or Alarm as the<br />
trigger. Enter the time, and select each weekday of your choice by<br />
clicking on the button to toggle its ON/OFF state. A floating button<br />
means OFF; a sinking button means ON. If you are interested in<br />
using network traffic load to trigger capture, select Alarms and the<br />
individual network variables as the trigger.<br />
8 Select a capture filter profile from the Capture Filter pull-down<br />
menu. The capture filter selected here will be used as the capture<br />
filter when the start trigger activates the capture.<br />
9 Mark the Enable check box of the Stop Trigger section, and click<br />
Define.<br />
10 Click New, and define a new stop trigger Stop Trigger Sample<br />
and click OK.<br />
11 Select the Time check box. Specify Stop after 3600 seconds<br />
from start as the first stop trigger. Mark the Event filter check<br />
box, and select IP Address as the second stop trigger. Then click<br />
OK.<br />
12 Enter Capture 3000 packets after stop trigger happened. Click<br />
OK.<br />
The trigger appears as in the figure below.<br />
Figure 10-10. Sample Trigger