340
edits
Capture module: Difference between revisions
Jump to navigation
Jump to search
→Using expert filters to start captures
m (Drop "New in version 3.0" comments) |
|||
| Line 163: | Line 163: | ||
* '''badCRC''': The value of this operand will be 1 for packets with a CRC error and will be 0 for good packets. Capturing packets with bad CRC is currently only supported on 1Gb interfaces. | * '''badCRC''': The value of this operand will be 1 for packets with a CRC error and will be 0 for good packets. Capturing packets with bad CRC is currently only supported on 1Gb interfaces. | ||
* '''icmpType''': The value of a certain ICMP type (e.g. Echo request 8, Echo reply 0). | * '''icmpType''': The value of a certain ICMP type (e.g. Echo request 8, Echo reply 0). | ||
* '''dhcpMessageType''': The value of a certain DHCP message type (e.g. Request 3, ACK 5). | |||
* '''tcpFlags''': A single TCP flag or a list of TCP flags joined by the ‘+’ sign. If a list of flags is given, all flags must be present in the packet. Supported TCP flags are syn, ack, fin, rst, psh and urg. | * '''tcpFlags''': A single TCP flag or a list of TCP flags joined by the ‘+’ sign. If a list of flags is given, all flags must be present in the packet. Supported TCP flags are syn, ack, fin, rst, psh and urg. | ||
* '''callId''': The string value of a SIP call ID or similar identifier (e.g. P-Palladion-ID) | * '''callId''': The string value of a SIP call ID or similar identifier (e.g. P-Palladion-ID) | ||