Ethereal-users: Re: [Ethereal-users] Newbie question about capture filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 7 Aug 2001 10:10:37 +0200
> I want to capture the packets of only two protocols i.e. h225 and h245.
> I tried the following filter string for capture filter:
> a) h225
> b) h225 h245
> c) proto h225
> d) proto h245
> e) proto h225 h245
> f) ether proto h225 h245
> but it was of no help.

You need the H.323-enhanced version of Ethereal in order
to be able to filter on H.323 specific items.

Please take a look at http://www.voice2sniff.org/ for the
H.323-enhanced version of Ethereal.

The syntax for that version is like you indicated:
a) h225
b) h225 || h245

Greetings,
[Hans Verbeek]