.. _advanced_filters:

================
Advanced Filters
================

====================================== =======
                                Filter Remarks
====================================== =======
Only NC applications                   Display flows that weren't categorized in any of the user-defined application (tagged as the ``NC`` application)
Without NC applications                Display flows that were categorized in one of the user-defined application
With VLAN                              Display flows that made use of 802.1q
Without VLAN                           Display flows that didn't make use of 802.1q
With payload                           Display TCP or UDP flows that had a payload
Without payload                        Display flows that didn't have any payload
Only IPv6                              Display flows that were transported over IPv6
Without IPv6                           Display flows that were transported over IPv4
With retransmission                    Display TCP flows that had retransmissions
Without retransmission                 Display flows that didn't have any retransmissions
Only clt/srv unilateral flows          Display flows where the client/source emitted packet but not the server/destination
Without clt/srv unilateral flows       Display flows where both the client/source and the server/destination had emitted packets
With connection                        Display TCP flows which had a connection
Without connection                     Display flows that didn't have a connection
With transaction                       Display TCP flows that had a response from the server/destination
Without transaction                    Display flows that hadn't a response from the server/destination
Exclude intersection of provided zones Display flows not being in the intersection of the provided zones [#example1]_
Only intersection of provided zones    Display flows being only in the intersection of the provided zones [#example2]_
Exclude children of provided zones     Don't include the children of the specified zones
====================================== =======

Consider the following zones:

.. container:: example

    | /RootZone
    |    \_ Zone1
    |    |_ Zone2
    |    |_ Zone3

.. [#example1] Exclusion of the intersection of the ``RootZone`` and ``Zone2`` will only show flows of ``RootZone``, ``Zone1`` and ``Zone3`` from/to ``Zone2``
.. [#example2] Intersection of the ``RootZone`` and ``Zone2`` will only show flows in ``Zone2``