Filter
Top Products
3.7. The "View" menu ...................................................................................................39
3.8. The "Go" menu ......................................................................................................42
3.9. The "Capture" menu ...............................................................................................44
3.10. The "Analyze" menu .............................................................................................46
3.11. The "Statistics" menu ............................................................................................48
3.12. The "Help" menu ..................................................................................................50
3.13. The "Main" toolbar ...............................................................................................52
3.14. The "Filter" toolbar ...............................................................................................55
3.15. The "Packet List" pane ..........................................................................................56
3.16. The "Packet Details" pane ......................................................................................57
3.17. The "Packet Bytes" pane ........................................................................................58
3.18. The Statusbar .......................................................................................................59
4. Capturing Live Network Data .............................................................................................61
4.1. Introduction ..........................................................................................................61
4.2. Prerequisites ..........................................................................................................62
4.3. Start Capturing ......................................................................................................63
4.4. The "Capture Interfaces" dialog box ...........................................................................64
4.5. The "Capture Options" dialog box .............................................................................65
4.5.1. Capture frame .............................................................................................65
4.5.2. Capture File(s) frame ....................................................................................67
4.5.3. Stop Capture... frame ....................................................................................67
4.5.4. Display Options frame ..................................................................................68
4.5.5. Name Resolution frame ................................................................................68
4.5.6. Buttons ......................................................................................................68
4.6. Capture files and file modes .....................................................................................69
4.7. Link-layer header type ............................................................................................71
4.8. Filtering while capturing ..........................................................................................72
4.9. While a Capture is running ... ...................................................................................74
4.9.1. Stop the running capture ...............................................................................74
4.9.2. Restart a running capture ...............................................................................75
5. File Input / Output and Printing ...........................................................................................77
5.1. Introduction ..........................................................................................................77
5.2. Open capture files ..................................................................................................78
5.2.1. The "Open Capture File" dialog box ................................................................78
5.2.2. Input File Formats ........................................................................................79
5.3. Saving captured packets ..........................................................................................81
5.3.1. The "Save Capture File As" dialog box ............................................................81
5.3.2. Output File Formats .....................................................................................83
5.4. Merging capture files ..............................................................................................84
5.4.1. The "Merge with Capture File" dialog box ........................................................84
5.5. File Sets ...............................................................................................................86
5.5.1. The "List Files" dialog box ............................................................................86
5.6. Exporting data .......................................................................................................87
5.6.1. The "Export as Plain Text File" dialog box .......................................................87
5.6.2. The "Export as PostScript File" dialog box .......................................................87
5.6.3. The "Export as CSV (Comma Seperated Values) File" dialog box .........................88
5.6.4. The "Export as PSML File" dialog box ............................................................88
5.6.5. The "Export as PDML File" dialog box ............................................................89
5.6.6. The "Export selected packet bytes" dialog box ...................................................90
5.7. Printing packets .....................................................................................................92
5.7.1. The "Print" dialog box ..................................................................................92
5.8. The Packet Range frame ..........................................................................................94
5.9. The Packet Format frame .........................................................................................95
6. Working with captured packets ............................................................................................97
6.1. Viewing packets you have captured ...........................................................................97
6.2. Filtering packets while viewing ............................................................................... 103
6.3. Building display filter expressions ........................................................................... 105
6.3.1. Display filter fields .................................................................................... 105
6.3.2. Comparing values ...................................................................................... 105
6.3.3. Combining expressions ............................................................................... 106
6.3.4. A common mistake .................................................................................... 108
6.4. The "Filter Expression" dialog box .......................................................................... 109
6.5. Defining and saving filters ..................................................................................... 111
Ethereal User's Guide
v