Using Netmaster Smarttrace to record TCP handshake only

Document ID : KB000109349
Last Modified Date : 03/08/2018
Show Technical Document Details
Introduction:
Situations exist where connectivity problems occur on a port or range of ports that may be very busy, or have lots of connections / traffic flow, and it is necessary to let a trace run to capture only the handshake from a particular IP.
Question:
Is there a way to set up the Smarttrace filter to just record the three-way TCP handshake packets?
 
Answer:
Ensure the required fix is applied:
SO04784 for 12.2
SO04785 for 12.1

In the Netmaster region:
Issue   /SMART   from the command line
Select  option  A  (Add Smarttrace Definition)
Select   __ New Multiple TCP Connection Trace
Fill out the first 3 screens to create the desired filtering.
On the 4th screen set TRACE LIMIT to 1 and Initial Packet Traced to 3.

screenshot of 4th screen for trace definition

All other parameters should be set as desired for the current tracing needs.

Hit F4 to save then F3 to exit the screen.

The is takes you back to the main Packet Tracing Menu where you can use option L to view all traces and activate your trace from there.