| System Maintenance | 219
Parameter Description Configuration Method
Packet Filter String
Customizes the packet filter
string.
For more information, refer to
Capturing Packet Filter String.
Note: the default value id blank.
It works only when you set the
Pcap Filter Type to Custom.
Web user interface
4.
Click Confirm.
5.
In the Pcap Feature field, click Start to start capturing enhanced packets.
6.
Reproduce the issue.
7.
Click Stop to stop capturing.
8.
Click Export to open the file download window, and then save the file to your local system.
•
Capturing Packet Filter String
Capturing Packet Filter String
You can customize the packet filter string to capture the desired packets.
Syntax:
Protocol+Direction+Host(s)+ Value +Logical Operations+Other Expression
The following table introduces the syntax.
Syntax Description
Protocol
Values: ether, fddi, ip, arp, rarp, decnet, lat, sca,
moprc, mopdl, tcp and udp
If no protocol is specified, all the protocols are used.
Note that the application-level protocol, such as http,
dns and sip are not supported.
Direction
Values: src, dst, src and dst, src or dst
If no source or destination is specified, the "src or dst"
keywords are applied. For example: "host 10.2.2.2" is
equivalent to "src or dst host 10.2.2.2".
Host(s) Values: net, port, host, portrange
If no host(s) is specified, the "host" keyword is used.
For example: "src 10.1.1.1" is equivalent to "src host
10.1.1.1".
Logical Operations Values: not, and, or.
Negation ("not") has the highest priority. Alternation
("or") and concatenation ("and") have equal priority
and associate from left to right. For example, "not tcp
port 3128 and tcp port 23" is equivalent to "(not tcp
port 3128) and tcp port 23". "not tcp port 3128 and
tcp port 23" is NOT equivalent to "not (tcp port 3128
and tcp port 23)".