[Richard Urwin <RUrwin@xxxxxxxxxxxxxx>]

Welcome to Ethereal.

See http://www.ethereal.com/faq.html#q5.3:

----------------------------------------------------------
Q 5.3: I can set a display filter just fine, but capture filters don't
work.

A: Capture filters currently use a different syntax than display
filters. Here's the corresponding section from the ethereal(1) man page:

"Display filters in Ethereal are very powerful; more fields are
filterable in Ethereal than in other protocol analyzers, and the syntax
you can use to create your filters is richer. As Ethereal progresses,
expect more and more protocol fields to be allowed in display filters.

Packet capturing is performed with the pcap library. The capture filter
syntax follows the rules of the pcap library. This syntax is different
from the display filter syntax."

The capture filter syntax used by libpcap can be found in the tcpdump(8)
man page. (http://www.ethereal.com/tcpdump.8.html)
----------------------------------------------------------

Hint:
	host 131.107.31.252

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."



-----Original Message-----
From: Grégory LECUYER [mailto:baron.s.a@xxxxxxxxxx]
Sent: 19 November 2002 12:42
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Win32/Ethereal 0.9.2/WinPcap_2_3


Hello,

I've bought a book named "Local Area NETWORK" from Micro Application
(FRANCE/BELGIQUE), there is a CD-ROM with it.
On this CD I've found a very great apps ETHEREAL, very very great !!!
To be perfect I just need to create a filter what I can't do ,

In the filter param I put : ip.addr == 131.107.31.252 (my PC's LAN
address)
Then when I start the capture by OK it gives me "Unable to Parse filter
string (parse error)"
With an empty string for the filter param I can analyze everything is
going
on our NETWORK.

What can I do ?

Sincerely,

and thanks again for this very very great freeware.


GREGORY LECUYER




_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________



________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________

Attachment: 5.3 I can set a display filter just fine, but capture filters don't work..url
Description: Binary data