Ethereal-users: Re: [Ethereal-users] Filter problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Fri, 27 Oct 2000 11:36:47 -0400
On Fri, Oct 27, 2000 at 11:30:19AM -0400, Timothy Reaves wrote:
>     I'm trying to filter a capture.  I'm wanting to look at all the
> traffic to and from a particular machine.  When I enter the filter
> string and hit enter, I get the message

What is the filter string that you are entering, and where are you
entering it. Ethereal distinguishes capture filters (in the Capture
dialogue window) from display filters (in the main Ethereal window).
They have different syntaxes.

A capture filter filtering on a single host would be:

	host 10-180.neo.rr.com

While a display filter on a single host would be:

	ip.addr == 10-180.neo.rr.com

--gilbert