Filter
Top Products
7-26
Surveyor
User’s Guide
The following steps describe how to create two filter templates, logically combine
them using an OR operator, and load the resulting Template Combination to a
resource:
1. Select the
HTTP pre-defined filter template from the Available Filter Templates
box.
2. Press the
Name button for Station Address 1. Select the address from the
name table and click
OK.
3. Pull down the
Direction box and set the indicator to source address (->).
4. Be sure the
Apply Conversation to Template check box is selected in the Add
Conversation to Filter Template area.
5. Press the
Save Custom Template button.
6. Enter the name (
HTTP_Activity_Station2) of the new filter template in the Add
to Available Filter Templates dialog box. The new filter template name will
appear in the Custom_Templates available for other filtering operations.
7. Using the
FTP pre-defined filter template as the starting point, repeat steps 1
through 6 to create a similar custom template for FTP.
8. Highlight the
HTTP_Activity_Station2 template in the Custom_Templates
section of the
Available Filter Templates box. Press the Add button to apply the
filter template. The filter template appears in the
Template Combination box.
9. Press the
OR operator button. The operator is appended to the filter template in
the
Template Combination box.
10. Highlight the
FTP_Activity_Station2 template in the Custom_Templates
section of the
Available Filter Templates browser. Press the Add button to apply
the filter template. The filter template appears in the
Template Combination
box. You now have two filter templates in the Template Combination box
connected by an
OR operator.
11. Press the Load Filter button to load the filter to the resource.
12. You are now ready to start capture. The capture buffer will contain only the
packets sent from Station2 that have an FTP or HTTP port number.