Display filter
This page restricts the packet capturing to specific types of packets. There are further filtering conditions such as the type of interface, ether type, source IP address & destination IP address.
- Go to Diagnostics > Packet capture and click Display filter.
-
Enter details to configure the display filter
- Interface name
- From the list, select the physical interface used for filtering packets logs.
- Ethernet type
- Select the Ethernet type: IPv4 or IPv6 or ARP.
- Ethernet type is a field in an Ethernet frame. It is used to indicate the protocol encapsulated in the Ethernet frame.
- Packet type
- From the list, select the packet type used for filtering packets.
- Source IP
- Specify source IP address (IPv4/IPv6).
- Source port
- Specify source port number.
- Destination IP
- Specify destination IP address (IPv4/IPv6).
- Destination port
- Specify destination port number.
- Reason
- Select the reason to display the filter from the available
options.
- Firewall
- LOCAL_ACL
- DOS_ATTACK
- INVALID_TRAFFIC
- INVALID_FRAGMENTED_TRAFFIC
- ICMP_REDIRECT
- SOURCE_ROUTED_PACKET
- FRAGMENTED_TRAFFIC
- APPLICATION_FILTER
- USER_IDENTITY
- IPS
- MAC_FILTER
- IPMAC_FILTER
- IP_SPOOF
- NEIGHBOR_POISONING
- SSL_VPN_ACL_VIOLATION
- VIRTUAL_HOST
- ICMP ERROR MESSAGE
- Status
- Select the status of the filter from available options.
- Allowed
- Violation
- Consumed
- Generated
- Incoming
- Forwarded
- Rule ID
- Specify ID for the rule.
- User
- Select a user from the list of already existing users.
- Connection ID
- Specify a connection ID.
- Clear
- Click to remove the filter settings.
- Click Save.