[Brad Hards <bhards@xxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 26 Jun 2003 22:19 pm, mike wrote:
> You're certainly right that the syntax etc is all based on bpf/libpcap. A
> great deal of my capturing is done with tcpdump on IDSes or non-X machines
>   and I use Ethereal for post capture analysis.  However, I wrote this
> primer because the Ethereal help for capture filters freaks a lot of
> people.  There is only reference to the the pcap lib and tcpdump man page.
>  To some people coming from a windows background, this just adds to the
> confusion/frustration.  By putting up a primer that leads people through
> the
Mike - can I use some of your stuff in my updating of the Ethereal manual? I 
may need to adjust the style a bit to match the other content, but it is 
certainly much better than what the manual has now.

Brad
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE++vfmW6pHgIdAuOMRArEIAJ9q0zlgoIo02XYZ8yVtHIsz+V5+rQCgtU6Y
eSZpFp9ZTxQ+gcpQWDMIuJs=
=bfzF
-----END PGP SIGNATURE-----