Specify address pairs in a capture filter

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To specify address pairs in a capture filter

Open Network Monitor.
If prompted, select the local network from which you want to capture data by default.
On the Capture menu, click Filter.
Double-click the AND (Address Pairs) line in the decision tree.

Or, double-click the address pair you want to edit.
In the Address Expression dialog box, specify address pair properties, and then click OK.

Notes

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.
To start Network Monitor, click Start, click Control Panel, double-click Administrative Tools, and double-click Network Monitor.
You can define up to three address pairs in a capture filter.
In a capture filter, EXCLUDE statements take logical precedence over INCLUDE statements. Regardless of the sequence in which statements appear in the Capture Filter dialog box, Network Monitor evaluates EXCLUDE statements first. Therefore, in a filter containing both an EXCLUDE and an INCLUDE statement, if a frame meets the criteria specified in an EXCLUDE statement, Network Monitor discards the frame. Network Monitor does not test that frame against the INCLUDE statement to see if the frame also meets the criteria of the INCLUDE statement.
When you close the capture filter, Network Monitor optimizes the logic you used in the (Pattern Matches) branch of the capture filter decision tree. Therefore, when you re-open the capture filter, it might look different from the way it did when you created it. For example, if you define multiple pattern match statements, Network Monitor automatically processes them with an implicit OR operator and removes any explicit OR operators between such statements.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.