12
1.3 Filters Tab
The
Filters
Tab gives access to the ProfiShark 10G’s hardware filters and deep packet
inspection (DPI) feature. When enabled, only the packets matching the criteria configured in
these filters and DPI will be captured in
Live Capture
and
Direct Capture
.
These filters only affect the captured traffic; they do not interfere with the counters
displayed in the
Counters
Tab
.
In the example above, the ProfiShark 10G has been set to capture only packets originating
from or destined to any MAC address ending with 00, originating from or destined to any
IPv4 address starting with 192.168, using port 443 for either incoming or outgoing traffic,
and carrying matching DPI strings in their payload. The
Packet type
filter tells the ProfiShark
which types of packets should be included in or excluded from the capture.
The DPI field allows users to search for a particular string (up to 16 characters in length) in
the packets. This procedure is performed in real time, even at 20 Gbps. The left field accepts
hexadecimal characters, while the right field accepts ASCII characters.
▶
NOTE:
Not all hexadecimal characters can be displayed in the ASCII field.
