Ethereal-users: Re: [Ethereal-users] "parse error"

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 29 Jul 2002 10:23:49 -0700
On Mon, Jul 29, 2002 at 07:19:14AM +0200, Administrator wrote:
> I am running Ethereal version 0.9.5 on Windows 2000 , I have WinPcap v.
> 2.3 , but but I still get "parse error" errors when I'm entering valid
> capture filters .

Do you get a parse error if you try those capture filters with WinDump?

If so, then the problem is that they're not valid capture filters for
WinPcap 2.3 (which is based on libpcap 0.6.2 - the set of valid filters
changes from libpcap release to libpcap release, as new features are
added, so a filter valid in libpcap 0.7.1 might not be valid in 0.6.2).

What are the capture filters you're trying?

Note that the syntax for capture filters is different from the syntax
for display filters; the syntax for capture filters in WinPcap 2.3 is
described in

	http://windump.polito.it/docs/manual.htm

(search for "elects which packets will be dumped" in that page to find
the section that describes the filter syntax).