Chapter 4 Capturing and Decoding Packet Data

Viewing Packet Decode Information

Step 3 Click the Delete button.

A dialog box displays and asks “Delete all capture file(s)?

Step 4 Click OK to delete all the files or Cancel to allow them to remain.

Viewing Packet Decode Information

After some packets or files have been captured, you can use the Packet Decoder to view the packet contents.

The Packet Decoder window has four parts:

Packet Decoder operations

Packet browser pane

Protocol decode (see Viewing Detailed Protocol Decode Information, page 4-22)

Packet hexadecimal dump

To view packet decode information:

Step 1 Choose Capture > Packet Capture/Decode > Sessions, or Capture > Packet Capture/Decode > Files (depending on which type you would like to decode).

Step 2 Choose a capture session or file, and then click the Decode button. The Packet Decoder window displays.

Table 4-9describes the packet decoder operations (buttons on the NAM Traffic Analyzer - Packet Decoder screen.

Table 4-9

Packet Decoder Operations

 

 

 

Button

 

Description

 

 

 

Stop

 

Stop packet loading

 

 

 

Prev

 

Load and decode the previous block of packets from the NAM

 

 

 

Next

 

Load and decode the next block of packets from the NAM

 

 

 

Go To

 

Load and decode a block of packets starting from the specified packet number.

 

 

 

Display Filter

 

Launch the Display Filter dialog. See Filtering Packets Displayed in the Packet

 

 

Decoder, page 4-21.

 

 

 

TCP Stream

 

Follow the TCP stream of the selected TCP packet.

 

 

Note This might take a long time depending on the traffic pattern.

 

 

 

 

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

4-20

OL-22617-01

Page 180
Image 180
Cisco Systems 5 Viewing Packet Decode Information, Stop packet loading, Follow the TCP stream of the selected TCP packet