Cisco Systems NAM, 5 manual Capturing and Decoding Packet Data, Quick Capture

C H A P T E R 4

Capturing and Decoding Packet Data

The Capture feature of the NAM Traffic Analyzer allows you to set up multiple sessions for capturing, filtering, and decoding packet data, manage the data in a file control system, and display the contents of the packets.

Note Capture does not apply to the NAM Virtual Service Blades.

This chapter contains the following sections:

•Sessions, page 4-2

–Software Filters, page 4-7

–Hardware Assisted Filters, page 4-12

•Files, page 4-15

•Viewing Packet Decode Information, page 4-20.

Quick Capture

From the Context menu of many of the dashboard bar charts which show Applications or Hosts or VLANs. you can start a capture. For example, when you click on an Application in a bar chart (as shown in Figure 4-1) and choose “Capture,” the following is done automatically:

•A memory-based capture session is created

•A software filter is created using that application

•The capture session is started

•The decode window pops open and you can immediately see packets being captured

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

OL-22617-01 4-1