Ethereal-users: Re: [Ethereal-users] Questions about filters etc

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 19 Dec 2000 10:09:15 -0600
If all you can see *without filters* is broadcast packets, then that is a
sign that you are on
some sort of switch rather than shared media (hub), or that the driver for
your interface card
doesn't support promiscuous mode. Filters let you see subsets of your data,
not supersets.

--gilbert

Annelie.A.Faber@[email protected] on 12/19/2000 07:32:29 AM

Sent by:  ethereal-users-admin@xxxxxxxxxxxx


To:   ethereal-users@xxxxxxxxxxxx
cc:
Subject:  [Ethereal-users] Questions about filters etc



Hi!
When we are trying to use ethereal with filters, all we can see is UDP
broadcast packets how to do to see for ex. TCP or other packets? We
used an example "filter string : ip[19]&0xff = 0xff" is there another
filter string that could be used?
We can´t save the files we´ve captured on disk how to do it???
Grateful for a quick answer!
Annelie and Susanne



_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users