1.3 Create a Display Filter

Marţi, 18 August 2009 16:49 Eugen Morar
Email
In this video i will create a display filter in network monitor.


  1. In the Network Monitor, Select Capture > Display Captured Data to open the Frame Viewer window.
  2. When the Frame Viewer window appears, use the Display > Filter command to open the Display Filter dialog box.
  3. Select the Protocol == Any line and click the Edit Expression button. You’ll see the Protocol tab of the Expression dialog box.
  4. Click the Disable All button to remove all the protocols. The filter screens out any protocol that’s disabled.
  5. Select HTTP in the Disabled Protocols list and click the Enable button. Now HTTP should be the only enabled protocol. Click the OK button.
  6. Click the OK button in the Display Filter dialog when you’re done. The Frame Viewer window reappears, but notice that the frame numbers (in the leftmost column) are no longer consecutive—the filter is screening out any traffic that doesn’t match its criteria.
  7. Double-click a frame to see its contents. Because you’re looking at unencrypted HTTP packets, you can clearly see the requests and responses.