Example 2

Goal
Monitoring the outgoing and incoming traffic of my computer and traffic monitoring to host 192.168.2.2.

Solution
It is required to create two filters. The first filter will count the traffic from my computer to host 192.168.2.2. The second filter will count all traffic of my computer except the traffic to host 192.168.2.2.

Filter 1. Traffic from my computer to host 192.168.2.2.
N
Rule		 Type of IP 
protocol		 Source
address		 Source
port		 Destination
address		 Destination
port		 Both
directions		 Action
for
packet		 Additional condition
1 Any My computer   192.168.2.2   Yes Count and pass  
Filter 2. All traffic of my computer except host 192.168.2.2.
N
Rule		 Type of IP 
protocol		 Source
address		 Source
port		 Destination
address		 Destination
port		 Both
directions		 Action
for
packet		 Additional condition
1 Any My computer   Any   Yes Count  

This filterset can be explained as follows. Captured packets, matching the first filter will be counted and will not be processed by the second filter because the single rule of the first filter has the action "Count and Pass". Therefore, all captured packets, except for the ones matching the first filter, will be processed by the second filter.