CHAPT ER
4-1
User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01
4
Capturing and Decoding Packet Data
The Capture feature of the NAM Traffic Analyzer allows you to set up multiple sessions for capturing,
filtering, and decoding packet data, manage the data in a file control system, and display the contents of
the packets.
Note Capture does not apply to the NAM Virtual Service Blades.
This chapter contains the following sections:
• Sessions, page 4-2
–
Software Filters, page 4-7
–
Hardware Assisted Filters, page 4-12
• Files, page 4-15
• Viewing Packet Decode Information, page 4-20.
Quick Capture
From the Context menu of many of the dashboard bar charts which show Applications or Hosts or
VLANs. you can start a capture. For example, when you click on an Application in a bar chart (as shown
in Figure 4-1) and choose “Capture,” the following is done automatically:
• A memory-based capture session is created
• A software filter is created using that application
• The capture session is started
• The decode window pops open and you can immediately see packets being captured