4-21
User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01
Chapter 4 Capturing and Decoding Packet Data
Viewing Packet Decode Information
Table 4-10 describes the columns displayed in the packet browser pane.
Browsing Packets in the Packet Decoder
You can use the packet browser to browse the list of captured packets and do the following:
• Filter by protocol, IP address, MAC address, and custom display filter.
• Use the Next, Previous, and Go To buttons to load packets from the capture session.
Note The capture must be paused or stopped for you to use these features.
Filtering Packets Displayed in the Packet Decoder
To filter packets displayed in the packet decoder:
Step 1 From the Packet Decoder window, click the Display Filter button. The Packet Decoder - Display Filter
Window displays.
Step 2 Do the following:
• Choose a Filter Mode:
–
Inclusive displays packets that match the condition(s.)
–
Exclusive displays packets that do not match the condition(s).
• Choose an Address Filter:
–
IP address filters on IP address.
–
MAC Address filter on MAC address.
–
Source allows you to specify the source address, or leave it blank if not applicable.
Tab l e 4-10 Packet Browser
Field Description
Pkt Packet numbers, listed numerically in capture sequence. If the decode (display) filter is active, the packet
numbers might not be consecutive.
Time Time the packet was captured relative to the first packet displayed (not the first packet in the session).
Note To see the absolute time, see the Detail window.
Size Size of the packet, in bytes.
Source Packet source, which might be displayed as hostname, IP, IPX, or MAC address.
Note To turn hostname resolution on and off for IP addresses, choose the Setup tab and change this setting
under Preferences.
Destination Packet destination, which might be displayed as hostname, IP, IPX, or MAC address.
Protocol Top-level protocol of the packet.
Info Brief text information about the packet contents.