4-22
User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01
Chapter 4 Capturing and Decoding Packet Data
Viewing Packet Decode Information
–
Destination allows you to specify the destination address, or leave it blank if not applicable.
–
Both Directions allows you to match of packets travelling in both directions.
• Define a Protocol Filter.
–
Click Match any to display packets that match any of the protocols or fields
or
–
Click Match all to display packets that match all of the protocols or fields.
–
Choose a protocol from the Protocols list.
Note You can enter the first few letters of the protocol name to go directly to the protocol. If you make
a typo, press ESC or SPACE to reset.
–
Choose a protocol field from the Fields list, then specify the field value if applicable.
• Choose a Custom Filter. See Custom Display Filters, page 4-23 for how to set up a custom display
filter.
Step 3 Click OK to apply the filter and close the window.
Click Submit to apply the filter and keep the window open.
Click Clear Filter to clear all of the fields.
Click Cancel to close the window without any action.
Viewing Detailed Protocol Decode Information
To view detailed protocol information:
Step 1 Highlight the packet number about which you want more information.
Detailed information about that packet is displayed in the Protocol Decode and hexadecimal dump panes
at the bottom of the window.
Note If you highlight the details in the Protocol Decode pane, the corresponding bytes are highlighted in the
hexadecimal dump pane below it.
Step 2 To review the information, use the scrolling bar in the lower panes.
Note When you decode SCCP traffic, the NAM lists the protocol as skinny, not SCCP.
Tip • Protocols are color coded both in the Packet Browser and the Protocol Decode pane.
• Choose the protocol name in the Protocol Decode pane to collapse and expand protocol information.