Creating filters with the make filter command
You can use the command to easily create a filter based on the address, protocol, and port settings of an existing packet, node, protocol, conversation, or packet decode.
To create a filter with the Make Filter command:
1. Right-click a packet, node, protocol, conversation, or packet decode item from one of the views available in a capture window and choose . The Insert Filter dialog appears with the Address, Protocol, and Port settings already configured with the information from the packet that was selected.
2. Enter a new name in the Filter text box and make any additional changes.
3. Click . The new filter is now available whenever a list of available filters is displayed.
4. To enable the new filter in your capture window, click the Filters view and select the check box of the new filter. The filter is applied immediately, even if a capture is already under way.