User`s guide

Protocol Analyzer
Building a Filter
366 5967–9446
To filter by protocol
1 Choose Filter➤Protocol…
2 Specify the protocol(s) to filter.
3 Indicate whether to include or exclude packets matching
the specified protocol(s).
When you select Filter➤Protocol…, a window like the one shown in
figure 76 on page 367 appears. This window lets you specify the criteria
for the protocol filter.
The protocol filter component window contains the following items.
Protocol List Shows the protocols in the current filter list. Packets matching the
items in the filter list will be captured or ignored, depending on the
Include/Exclude setting described below.
Add to List Adds protocols to the Protocol List. Enter a protocol in this text field
and press Return to add it. A protocol may be specified:
● As a protocol name (for example, ftp). When you enter a name, the
file sysprotolist and the built-in protocol map are searched. Any
entries that match the protocol name are placed in the filter list,
regardless of the protocol level.
● As a protocol level and name (for example, tcp ftp). When you enter
a protocol level and name, sysprotolist and the built-in protocol
map are searched; Any entries that matches both the protocol level
and name are placed in the filter list.
● As a protocol level and a numeric value that represents the protocol
you want (for example, tcp 21). If a matching entry is found in
sysprotolist or the built-in protocol map, its protocol name is
added to the protocol level and numeric value in the filter list; other-
wise, only the level and numeric value are added.
Refer to table 38 on page 368 for a list of protocol levels.
Remove from List Removes selected protocols from the Protocol List.