That may work for the display filter (I am not sure) but you require a
different syntax for capture filters (because it is libpcap or winpcap
doing the captures).
Try "net 172.30.200.0/22" if you want anything to or from that network.
Preface the word net with "src" or "dst" if you want to only see packets
with that network as the source or destination.
On Thu, 2003-06-19 at 14:39, Jon Waller wrote:
> I'm trying to capture data coming from a specific subnet with the following
> packet filter:
>
> ip.addr == 172.30.200.0/22
>
> Regardles of the permutations down to a specific host, i.e. ip.addr ==
> 172.30.200.13 I receive a message that the capture filter can't be parsed.
>
> Is there something that I'm missing?
>
> ____________________________________________
> Jon Waller
> Cisco Certified Network Associate
> Sr. Systems Engineer
> CyberNET Engineering
> Phone: 702.204.9619
> Fax: 702.270.1011
> jwaller@xxxxxxxxxxxxxxxxx
> www.cybernetgroup.com
>
>
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
--
------------
James V. Fields