Packetyzer - Finding Packets

How to Search for packets in the Packetyzer Protocol Analyzer

Searching for Packets

Packetyzer has very powerful facilities for finding packets that contain particular data strings or that match user defined Filters.

Note: This feature only highlights packets, it does not filter the list and redisplay the packets.

The Find Packets screen appears.

Searching for Packets that match a Filter

Click the Search button

A list of defined Filters appears.

Step 1 Click on the Filter(s) you require

Step 2 Click Find

See Filtering Packets for details of how to build Capture and Display Filters.

Searching for Packets that contain a string

Step 1 Click the Containing a string box

Step 2 Click on ASCII or Hexadecimal

Step 3 Type the ASCII or Hexadecimal values in the box

Step 4 Click Find

Step 5 Click Close

Filter Example

In this example we will open a previously captured file, find all the ARP packets, and color them.

Step 1 Click File, Open, or click the Open button on the Main Tool bar

Step 2 Select a file from the list, click the Open button

The packet list and decode details appear.

Step 3 Click the Search button

Step 4 Tick the box next to the Filter named ARP

Note: If you do not have an ARP Filter see Filtering Packets for more details.

Step 5 Click Find

Packets matching the Filter will be highlighted in the list.

Step 6 Click Close

Combining Searches

Each successful search will find one or more packets that match the criteria you have specified. It is also possible to perform further searches and add the findings to the previous ones.

To add to a previous search:

Step 1 Click Add to current selection

Step 2 Click Find

The newly found packets are marked and added to any previously found ones.

Step 3 Click Close