Hi Stephen,
Have you looked at the Ethereal user guide, in the section about
"Filtering while Capturing"
(http://www.ethereal.com/docs/user-guide/ch03capfilt.html)? It gives a
bit of detail.
The TCPdump man page (http://www.tcpdump.org/tcpdump_man.html) also
gives quite a bit of detail on capture filters, and is probably your
best resource (I'm sure people on this list know of others)
Specifically, if you wanted to filter on all packets to/from a
particular IP address, you could say simply:
host 172.16.1.1
OR
ip src 172.16.1.1 or ip dst 172.16.1.1
...for example.
Ian
Stephen Datz wrote:
Do you have any examples of valid capture filters that give the same
functionality as the display filters? I'm interested in capturing specific
IP addresses.
Stephen Datz
WAN Group
TNT Logistics North America
10751 Deerwood Park North, Suite 200
Jacksonville, FL 32256
(904) 564-1132
Fax (904) 996-1271
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users