Ethereal-users: Re: [Ethereal-users] file for read/capture filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 28 Jan 2002 12:19:07 -0800 (PST)
>       I have a lot of addresses that I want to filter
> (either capture or display). I read that the filter
> files are in the directory cfilters/dfilters under
> .ethereal.

You read incorrectly.  The filter files are *files* named "cfilters" and
"dfilters" under ".ethereal".

> However this dir only contains the preferences file.

That's because you haven't saved any capture or display filters yet.

> Do I create those two directories myself?

You can either

	1) create the *files* yourself, with a text editor

or

	2) select the "Capture Filters..." or "Display Filters..." item
	   of the "Edit" menu, add new filter expressions to the filter
	   list, and click "Save" to have Ethereal write the filters out
	   to the appropriate file for you.

> Also what would be the names of the files
> within this dir.

The names of the files are "cfilters" and "dfilters", in the ".ethereal"
directory, as per the above.

> I am using tethereal and I can't
> specify all the addresses of the read filter at the
> command prompt. So I want to store all the filter
> expressions in a file that the read filter can then
> read.

You can't do what you want to do - Tethereal doesn't read the filter
file; you can't give the name of a filter in the filter file as a filter
expression on the command line (or in any of the filter expression text
fields in Ethereal.

>        Also under Win 2k, where would the filter
> directories be? I checked underneath
> C:\winnt\profiles\administrator (my USERPROFILE) but
> didn't find anything there.

If there is no "Application Data" subdirectory of your profile
directory, it's because you haven't saved any preferences or filters
from Ethereal on Windows yet.  Ethereal won't create the directory until
it needs to.