Some categories include:
The user can setup custom categories to watch traffic by specific files, NFS/RPC procedure call, NFS clients, or user name (in the AUTH_UNIX field). Response tiem statistics can also be kept.