Creating Filters

Filters are utilized to separate particular packets. If no filter was enabled, Capsa will capture and analyze all the packets transmitted over the adapter. Once a filter was created, you can apply it to any analysis projects.

To create a filter, follow the steps below:

1. Click filter icon on the Analysis tab of the Ribbon section to open the Packet Filter Settings dialog box (See Packet Filter for details).

   You can also click filter icon on the Status Bar to open the Packet Filter Settings dialog box.

2. Click on the Packet Filter Settings dialog box to open the Packet Filter dialog box.
3. Select a simple filter or an advanced filter and set the filter, including the filter name, filter description, and filter rules (See Simple filter and Advanced filter for details).
4. Click OK on the Packet Filter dialog box, and click OK on the Packet Filter Settings dialog box.

To create a filter based on a selected object, which could be an address node, a port number or a protocol, follow the steps below:

1. Select an object and click on the toolbar or right-click an object and select Make Filter to open the Packet Filter dialog box.
2. Select a simple filter or an advanced filter and set the filter, including the filter name, filter description, and filter rules.
3. Click OK on the Packet Filter dialog box, and click OK on the Packet Filter Settings dialog box.

After creating a filter, if you want to apply the filter, you should select the Accept or Reject checkbox to enable the filter.