Ethereal-users: RE: [Ethereal-users] Sniffer Pro vs Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Visser, Martin (SNO)" <Martin.Visser@xxxxxxxxxx>
Date: Mon, 3 Sep 2001 12:46:19 +0800
Yep, it's rediculous (sic). 

Unfortunately Ethereal can't quite do this either. So, please write the code
to do this!(it has been noted more than once on the development list that
this feature is needed.)

In the mean time in Ethereal you can use a byte-wise display filter on the
IP packet (only works nicely if the mask is 8, 16 or 24 bits. "ip[12-14]==
0a:01:02" will match source IP addresses 10.1.2.x

(It is an exercise for the reader to figure out destination address lookups
and other masks)

Martin

Martin Visser
Network Consultant - Compaq Global Services

Compaq Computer Australia
410 Concord Road
Rhodes, Sydney NSW 2138
Australia

Phone: +61-2-9022-5630
Mobile: +61-411-254-513
Fax:+61-2-9022-7001
Email:martin.visser@xxxxxxxxxx



-----Original Message-----
From: Frank Kim [mailto:frank@xxxxxxxxxxxxx]
Sent: Saturday, 1 September 2001 6:03 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Sniffer Pro vs Ethereal


Hi all,
Can I get some input on the above subject as far as 'quality' and ease of
usage.  Also, I have the below question if anyone could help.  I know it's
not Ethereal related, but I'm desperate.

#########################################################################
Can you filter a subnet on a sniffer pro?

 

I'm using sniffer pro 3.0 on NT platform.  I am able to filter a single

host or any host.  But I cannot filter a subnet, for example,
10.10.10.0/24.  I have tried entering in all sort of combination such as:

 

10.10.10.*

10.10.10.*.*

10.10.10.0/24

10.10.10.0 /24

10.10.10.0/255.255.255.0

10.10.10.0 /255.255.255.0

10.10.10.0 255.255.255.0

10.10.10.any

10.10.10.

10.10.10.0                                                               
                                           
 

 

 

What am I missing?  Or maybe this sniffer software doesn't support a

subnet filtering?  If that's the case, then it's rediculous.  Because it

does support 'any' which is everything.

 

Thanks for any input.


########################################################################


-Frank




_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users