Creating filters with the Make Filter command
You can use the Make Filter command to easily create a filter based on the address, protocol, and port settings of an existing packet, node, protocol, conversation, or packet decode.
To create a filter with the command:
1. Right-click a packet, node, protocol, conversation, or packet decode item from one of the views available in a capture window and choose .
The Insert Filter dialog appears with the Address, Protocol, and Port settings already configured with information obtained from the selected packet.
2. Enter a new name in the Filter text box and make any additional desired changes.
NOTE: Click on the dialog to learn about the available options and settings.
3. Click . The new filter is now available whenever a list of available filters is displayed.
4. To enable the new filter in your capture window, click the Filters view and select the check box of the new filter. The filter is applied immediately, even if a capture is already under way.