Packet Filter is a tool that provides a real-time network packet filtering and analyzing. It allows to filter packets by all IP, ICMP, TCP, UDP, NETBIOS-SSN packet header fields.
Before using the tool you should select the Interface you want to use.
After the interface is selected the Packet Filter Dialog appears in the screen.
This dialog allows to select the packet header to use for filtering. You can enable
( disable ) the following options: IP, ICMP, UDP, TCP, NETBIOS-SSN, DATA, SIZE.
Clicking on the check IP shows the IP Header Parameters dialog.
This dialog allows to enable (disable ) and set values of IP header fields including Header Length, Precedence, Delay, Throughput, Reliability, Total Length, Identification, Flag DF, Flag MF, Time to Live, Protocol.
To add the source and destination addresses in the list click on the Add button.
To start filtering click on the Filter button .
Clicking on the check ICMP shows the ICMP Header Parameters dialog.
This dialog allows to enable ( disable ) and set values to ICMP header fields including
ICMP Type and ICMP Code. To start filtering click on the Filter button.
Clicking on the check UDP shows the UDP Header Parameters dialog.
This dialog allows to enable ( disable ) and set values to UDP header fields including
Source Port, Destination Port, Length in octets.
To start filtering click on the Filter button.
Clicking on the check TCP shows the TCP Header Parameters dialog.
This dialog allows to enable ( disable ) and set values to TCP header fields including
Source Port, Destination Port, Data Offset, Flag URG, Flag ACK, Flag PSH, Flag RST, Flag SYN, Flag FYN, Window, Urgent Pointer, TCP Options.
To start filtering click on the Filter button.
Clicking on the check NET-BIOS SSN shows the NetBios Session Header Parameters dialog
This dialog allows to enable ( disable ) and set values to NetBios Session header fields including Type, Flag, Length in octets.
To start filtering click on the Filter button.
Clicking on the check DATA shows the Packet Data Filter dialog.
This dialog allows to filter packets that contain the word specified in the editbox. To use this option enable the check Filter Packets Contained Word and enter the necessary word. You can use Case Sensitive or Case Insensitive search.
To start filtering click on the Filter button.
Clicking on the check SIZE shows the Packet Size Options dialog.
This dialog allows to Filter Packets By Size specified in the Packet Size field.
To start filtering click on the Filter button.
The option Set Capture Schedule will be available in later versions.
You can select the capture Buffer Size from the list. The minimal buffer size is 32KB and the maximal buffer size is 8MB.
To stop capturing when buffer is full select Stop Capture. And to wrap capture buffer select Wrap Capture Buffer.
To capture the data to numbered files enable the option Capture to numbered file. Clicking on the Browse button allows you to change the selected file.
Click on the Start button to start filtering process.
After the filtering is started the following view will be available: 
This view shows all the filtered packets with the following parameters: Protocol, Source Address, Destination Address, Source Port, Destination Port, Packet Size, Date Time.
Double-clicking on the row will open the packet editor which allows you to edit the packet header fields and data.
|
