Finding Traffic of Interest › Understand the List › Filter Criteria

Filter Criteria

The Detection Criteria group shows the filter criteria that are applied to the current view:

Application Filter

Filter by:

• Single port (80). To filter a particular application port, you can also right-click in the list of Detected Applications and click Apply description (port) as Application Filter.
• Range of ports (1024-2000).

Server Filter

Filter by:

• Single IP address (192.168.0.10). To filter a particular server, you can also right-click in the list of Detected Servers or Detected Networks and click Apply description (IP) as Server Filter.
• Range of IP addresses (192.168.0.0-192.168.0.255).
• Subnet (192.168.0.0/24).

  When filtering for tagged VLAN traffic, set the Group By Mask for the Server Filter to a server subnet that corresponds to a particular VLAN. Or, set the Group By Mask to Server (/32) to display all tagged VLAN traffic.

Maximum IPs/MAC filters out data from servers sharing the same MAC address. A high ratio is a cue that a server may be on the other side of a router and should not be monitored by CA ADA. This ratio is displayed in the IPs/MAC column of the Detected Servers panel. There is an All value at the top of this list that turns this filter off.

If detected applications, servers, or networks that were previously visible disappear on a later refresh, it is likely that the servers associated with the data exceeded the Maximum IPs/MAC filter.

Network Filter

Filter by:

• Single IP address (192.168.0.10). To filter a particular network, you can also right-click in the list of networks or servers and click Apply description (IP) as Network Filter.
• Range of IP addresses (192.168.0.0-192.168.0.255).
• Subnet (192.168.0.0/24).

Group By Mask defines how to organize detected (but not configured) client IPs into subnets. For example, suppose 3 client IPs - 192.168.0.2, 192.168.1.3, and 192.168.1.23 are detected and the Group By Mask setting is 24. These IPs would be organized into 2 networks, 192.168.0.0/24 (with 192.168.0.2) and 192.168.1.0/24 (with 192.168.1.3 and 192.168.1.23).