Ethereal-users: Re: [Ethereal-users] help with filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Craig Rodrigues <rodrigc@xxxxxxxxxxxx>
Date: Thu, 30 Nov 2000 15:43:11 -0500
On Thu, Nov 30, 2000 at 12:39:24PM -0800, Guy Harris wrote:
> > SNMP uses UDP port 161, so the capture filter would be "udp port 161", or
> > simply "port 161".
> 
> "udp port snmp" might also work, depending on whether the database
> "getservbyname()" uses exists (probably "/etc/services", on a UNIX
> machine, or an equivalent NIS map) and has an entry for "snmp" in it.

You would probably want to capture port 161 (snmp) and port 162 (snmp-trap).
So using a filter string something like:
port 161 or port 162
-- 
Craig Rodrigues        
http://www.gis.net/~craigr    
rodrigc@xxxxxxxxxxxx