How to filter protocol event according to a string
Purpose
The String Filter feature can be used to display only certain messages (by their displayed
decoded type, a precise value of
a decoded field, ...)
Defining an ASCII character string
Setting ON the String Filter feature
1) Using selection menus at the top of the Event-Editor window:
- Use Edit->String Filter to reach the definition
panel, and get access to the editing of the current string used for the
String Filter feature.
If the result string is a null string, the string filtering feature is
self-disable.
- Use View->String Filter or <F7>
key to enable the String Filter feature,
allowing the display of the only events which include the currently saved
filtering string.
2) Using the mouse:
- By the cursor highlighting, select a string of characters within the displayed events.
- using right button, choose the String Filter option.
The selected characters
are saved as the currently used filtering string and the String Filter
feature is self-enable.
Setting OFF the String Filter feature
Use View->String Filter (selection menu at the top
of the Event-Editor window) or <F7> key, to disable the String Filter
feature, and get the full display of events.
This action can be used in a toggle mode to set alternativelly ON
or OFF the String Filter feature.
Application to quickly count a number of messages
Following optionally a string filter action, the event-editor allows to
count a range of events displayed on the screen:
- the beginning of the range is defined by a marker
- the end of the range is defined by the event under the cursor
Then, if only certain message events are kept displayed, the followings steps
allow to count their total number:
1) Place the cursor on the first message event for example, and use Edit->Event
Date (selection menu at the top of the Event-Editor window) or <F5>
key, to set a first marker
displayed at the beginning of the event.
2) Place the cursor on the last message event, and use Edit->Event
Count or <CTRL> <F5> keys, to display the total number of
message events.
Application to quickly count the time duration elapsed between two messages
Following optionally a string filter action, the event-editor allows to
count the time duration between the first and the last events of a range displayed on the screen:
- the beginning of the range is defined by a marker
- the end of the range is defined by the event under the cursor
Use Edit->Event Delay or <SHIFT> <F5>
keys.
| 