325
edits
Capturing: Difference between revisions
no edit summary
Remco.derooy (talk | contribs) No edit summary |
Remco.derooy (talk | contribs) No edit summary |
||
| Line 7: | Line 7: | ||
For example; to capture a specific IP address, in the left menu navigate to 'L3 - IP' -> 'IP' statistics.<br> | For example; to capture a specific IP address, in the left menu navigate to 'L3 - IP' -> 'IP' statistics.<br> | ||
Then, easily find the desired IP address by sorting and/or a filtered search, and | Then, easily find the desired IP address by sorting and/or a filtered search, and clicking the capture button - [[File:Capture button.png]]. | ||
When a specific | When a specific time interval is displayed in the dashboard, only the payload during that time interval is extracted. | ||
[[File:IP pcap.png|none|thumb|700x700px]] | |||
To quickly find an IP address, you can sort the IP table via almost every column. The search bar/filter bar | To quickly find an IP address, you can sort the IP table via almost every column. The search bar/filter bar | ||
provides a quick method to reduce the table content to your hearts content.<br>This can be done by typing in (fragments of) the | provides a quick method to reduce the table content to your hearts content.<br>This can be done by typing in (fragments of) the | ||
IP address, (fragments of) the DNS name or by entering a "complex" filter. | IP address, (fragments of) the DNS name or by entering a "complex" filter. | ||
[[File:Search bar.png|1100px|thumb|]] | |||
Another quick way to create a pcap of a specific address is to use the simple capture. Go | Another quick way to create a pcap of a specific address is to use the simple capture. Go | ||
| Line 26: | Line 23: | ||
"Start capture" button. | "Start capture" button. | ||
[[File:Ap-mm-capture-capture-simple.png|600px|thumb]] | |||
== Which settings should I choose? == | == Which settings should I choose? == | ||