Appendix B

Pre-Defined Filter Templates

Filter Templates

All filter templates supplied with Surveyor are described below. Templates are defined by an offset(s) and a value(s). These templates can be used in a capture or display filter to capture or display common protocol packets.

An OR in the Offset column indicates that the associated value will cause the frame to be captured/displayed if the value is found in either offset. An OR in the Value column indicates that any of the ORed values found in the associated offset will cause the frame to be captured/displayed. HEX indicates hexadecimal format and DEC indicates decimal format in the Value column.

Filter values are interpreted on byte boundaries. Therefore, port numbers expressed in decimal are shown in the table in “dot” notation. For example, port 1719

(H.323_GD) is shown as “6.183” in decimal; the “6” displays in offset 34 and “183” displays in offset 35. For more information on converting decimal numbers to byte values, see “Entering Values that Cross Byte Boundaries” on page 10 in Chapter 4.

For devices other than THGm, the No. of Filters Used column indicates the number of hardware filters used by the template. Each device has maximum number of filters and this value can be useful in making sure you do not exceed this value.

B-1

Page 397
Image 397
Finisar Surveyor manual Pre-Defined Filter Templates