Filter
Top Products
7-7
Capture and Display Filters
Creating Filters with Filter Templates
7
Creating and Applying a Port Number
Surveyor provides a convenient way to add a port number to a filter. You specify
port numbers for the filter by filling out the
Add Port to Template area of the Filter
Design
window. This area consists of a protocol selection, frame type selection, a
port number, a direction indicator, and an
Apply Port to Template check box. Refer
to the table below for field definitions that comprise a port number selection.
Selecting Filter Templates
A filter template contains the data patterns for creating the logical conditions that
will be used as a test against incoming frames. To select a filter template, click on
the template in the
Available Filter Templates area and press the Add button, or dou-
ble-click on the filter template. The filter template is added to the
Template Combi-
nation
box.
Filter templates are always assigned a name and that name is referenced in the tem-
plate combination. Pre-defined filter templates are provided that can be used as is,
or you can define your own filter templates. See “Standard Filter Templates” in
Appendix B for the filter templates supplied with Surveyor. You cannot alter the
pre-defined filter templates.
Most filter templates have a defined offset and pattern within a frame. However,
one template has no specific offset and length (MatchAll). Some filter templates
have predefined values, such as MAC_DA_Broadcast (FFFFFFFFFFFF).
Table 7-2. Defining Port Numbers
Conversation Element Description
Protocol IP/UDP, IP/TCP
Frame Type EV2 (Ethernet II), SNAP, ISL, VLAN
Frame type applies to network layer addresses only. Use VLAN in
conjunction with Q+EV2 as the Conversation Frame Type to filter for
802.1Q packets.
Port Number Decimal UDP or TCP port number.
Traffic Direction Indicator <-> Capture/Display all traffic where the specified port
is the source or the destination
-> Capture/Display only the traffic where the
specified port is the source
<- Capture/Display only the traffic where the
specified port is the destination
Apply Port to Template
check box
Include or exclude the port specification as part of the filter template.