Y.A.S.C Software 

 General Filter generation Information

     

  • General
    • Exclusion/Inclusion
      ExclusionèWill capture and display packets that are NOT selected. It will exclude the selected Protocol.
      InclusionèWill only capture and display packets which are selected.

    • Loading/Capturing
      Attention : The filter will also apply to Projects you are loading. The Status of the Filter Settings is displayed on the Bottom of Sniff'em, in order to get rid of all filters which are currently applied p      ress CTRL+C or choose Filter->Software Filter->Clear


     Filter Properties   |   Protocol Filter

     

    • High Level Protocols

      • High Level Protocols
        Select which High Level Protocol to exclude (exclusion is the standard setting). You can easily change or add High Level Protocols by pressing the edit Button.


    Copyright Cisco (TM)


    • Low Level Protocols (IP)

      • Low Level Protocols (IP)
        Choose what IP protocol to exclude or to include.You can easily change Low Level Protocols by pressing the edit Button.




    Copyright Cisco (TM)

    • Edit

      • Edit Protocols
        Select the Entry you want to change or Edit and enter The protocol name above. That's it! Sniffem will now use and display the correspondent Protocol to each packet.

     

     Filter Properties   |  Source and Destination IP


      • Src IP : Source IP
      • Dest IP : Destination IP

      • Blanks
        Leaving a filed blank means that fields get's replaces by a Wildcard. Entering 212.24.192.1 as Source IP and leaving the Destination IP blank should give you above entry.
        Translation :
        • This entry will (inclusive is set) only capture packets which are coming from 212.24.192.1 and going to anywhere
        • This entry will (if exclusive is set) ignore packets that are coming from 212.24.192.1 and going to anywhere
        • This entry will (inclusive is set) only show packets having the Source IP set as 212.24.192.1 and ignores Destination IP.

        • This entry will (inclusive is set) only capture packets that are going to 192.*.*.* and coming from anywhere.
        • This entry will (if exclusive is set) ignore packets that are going to 192.*.*.* and coming from anywhere.
        • This entry will (inclusive is set) only show packets having the Destination IP set to 192.*.*.* and ignore Source IP.

     Filter Properties   |  Source Port and Destination Port



      • Src Port = Source Port
      • Dest Port = Destination Port
      • Blanks
        Leaving a filed blank means that field get's replaces by a Wildcard. Entering 31337 as Source Port and leaving the Destination Port blank should give you above entry.
        Translation :
        • This entry will (inclusive is set) only capture packets that are coming from port 31337 and going to any port.
        • This entry will (if exclusive is set) ignore packets that are coming from port 31337.
        • This entry will (inclusive is set) only show packets having the Source Port set to 31337 and ignore Destination Port.

        • This entry will (inclusive is set) only capture packets that are coming from a Portrange ranging from 1024 to 65535.
        • This entry will (if exclusive is set) ignore packets that are coming from a Portrange ranging from 1024 to 65535.
        • This entry will (inclusive is set) only show packets having the Source port between 1024 and 65535.


     Filter Properties   |  MAC Filter





      • MAC Filter
        This dialog will filter out packets depending on the MAC Source and MAC Destination.

     Filter Properties   |  ASCII String Filter





      • ASCII String
        This will display (inclusive is set) only packets which have the as string "login: warez" in it. You may add e-mail addresses or any other type of fields, including password fields.