4-23
User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01
Chapter 4 Capturing and Decoding Packet Data
Viewing Packet Decode Information
• To adjust the size of any of the panes, click and drag the pane frame up or down.
Using Alarm-Triggered Captures
You can configure multiple alarm-triggered captures that start and stop automatically by alarm events
you define.
To set up an alarm-triggered capture:
Step 1 Create an alarm event from the Setup > Alarms > Alarm Events window.
Configure an Alarm Event for the type of event for which you want to capture data. See Alarm Action
Configuration, page 2-37, for more information.
Step 2 Set a threshold for the event from the Setup > Alarms > Alarm Thresholds window.
Configure the threshold of parameters of interest in the associated Alarm Event. See Thresholds,
page 2-39, for more information.
Step 3 Set up a capture session from the Capture > Packet Capture/Decode > Sessions window. Click Create.
Choose the Start Event and/or the Stop Event for the associated Alarm Event. See Configuring Capture
Sessions, page 4-4, for more information.
Custom Display Filters
Use custom display filters to create and save customized filters to use in the Decode window to limit
which packets are to be displayed.
See these topics for help setting up and managing custom display filters:
• Creating Custom Display Filters, page 4-23
• Editing Custom Display Filters, page 4-26
• Deleting Custom Display Filters, page 4-27

Creating Custom Display Filters

To create custom display filters:
Step 1 Choose Capture > Packet Capture/Decode > Sessions.
The Hardware Filters box is displayed at the bottom of the page.
Step 2 Click Create.
The Custom Decode Filter Dialog Box, Table 4-11, displays.
Step 3 Enter information in each of the fields as appropriate.