User`s guide

Filters
5-17
14. Enter the protocol type to match.
15. Select whether the filter will use a field match.
NA is the default. You don’t need to enter anything if you are
not using a field match. If you are not using a field match, go to
Step 20.
If you are using a field match type either:
True – Filter the packet if the masked value matches.
False – Filter the packet if the masked valued does not match.
16. Enter the field origin.
17. Enter the field offset.
18. Enter the field value.
19. Enter the field mask.
20. Select the operator.
Or is the default. You don’t need to enter anything if the filter
will use the or operator. If you want the filter to use the and
operator, type and.
21. Enter the threshold time.
Zero (0) is the default. You don’t need to enter anything if the
filter won’t use a threshold time. If you are not using a
threshold, go to Step 23.
If you want the filter to use a threshold time, enter the value
you wish to use.
22. Enter the threshold.
23. Enter the filter number
One (1) is the default. You don’t need to enter anything if the
filter number will be 1.