background image
Software Test Equipment
123
EtherPeek
Take a look at the front screen of EtherPeek, shown in Figure 3.2. You see the way
capture filters work. The graphic in the figure shows five rows of text information.
The first row, "Packets Received," indicates the number of packets that the
protocol analyzer has seen. The following field, "Packets Filtered," indicates the
number of packets that were subjected to and matched the input filter criteria.
"Packets Processed" signifies the number of packets that were actually copied into
memory for analysis. The byte information deals with the analyzer's buffer size; it
varies, depending on the analyzer being used.
F I G U R E 3 . 2
EtherPeek front screen
Different capture filters may be used. EtherPeek has predefined capture
filters, such as those seen in Figure 3.3. Filters can be used, based on
protocol, protocol offset, or other information. The filters shown in Figure
3.3 are for protocols and well-known port numbers.
F I G U R E 3 . 3
Predefined capture filters
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com