Cisco Systems NAM, 5 manual Using Alarm-Triggered Captures, Custom Display Filters

Chapter 4 Capturing and Decoding Packet Data

Viewing Packet Decode Information

•To adjust the size of any of the panes, click and drag the pane frame up or down.

Using Alarm-Triggered Captures

You can configure multiple alarm-triggered captures that start and stop automatically by alarm events you define.

To set up an alarm-triggered capture:

Step 1 Create an alarm event from the Setup > Alarms > Alarm Events window.

Configure an Alarm Event for the type of event for which you want to capture data. See Alarm Action Configuration, page 2-37, for more information.

Step 2 Set a threshold for the event from the Setup > Alarms > Alarm Thresholds window.

Configure the threshold of parameters of interest in the associated Alarm Event. See Thresholds, page 2-39, for more information.

Step 3 Set up a capture session from the Capture > Packet Capture/Decode > Sessions window. Click Create.

Choose the Start Event and/or the Stop Event for the associated Alarm Event. See Configuring Capture Sessions, page 4-4, for more information.

Custom Display Filters

Use custom display filters to create and save customized filters to use in the Decode window to limit which packets are to be displayed.

See these topics for help setting up and managing custom display filters:

•Creating Custom Display Filters, page 4-23

•Editing Custom Display Filters, page 4-26

•Deleting Custom Display Filters, page 4-27

Creating Custom Display Filters

To create custom display filters:

Step 1 Choose Capture > Packet Capture/Decode > Sessions.

The Hardware Filters box is displayed at the bottom of the page.

Step 2 Click Create.

The Custom Decode Filter Dialog Box, Table 4-11, displays.

Step 3 Enter information in each of the fields as appropriate.

	User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01		4-23