Raj,
I don't have any SMTP traces to check with but you should be able to use the
-R flag to specify a display filter for tethereal. For example
tethereal -t a -ni eth0 -f 'port 25 and host not my.mail.server' -R
'smtp.req'
Alistair
> -----Original Message-----
> From: Rajkumar S [mailto:listuser@xxxxxxxxxxxxx]
> Sent: 21 July 2003 18:58
> To: Ethereal Users
> Subject: [Ethereal-users] tethereal and filter expressions
>
>
> Hello all,
>
> I am pretty new to tethereal, and wants to know about how to
> use filter
> expressions.
>
> In order to check for outgoing spams from my network I use an
> command like
>
> tethereal -t a -ni eth0 port 25 and host not my.mail.server | grep >
"SMTP Command:"
>
> reading through the tethereal man page, I get a feeling that
> the filter
> expressions can be used to achieve a much more powerful way to select
> what I want to see. But I am unable to figure out how to use
> read filter
> expressions. Basically I am bit confused with read filter expressions
> and capture filter expressions. Any clarifications or
> examples will be
> very much welcome.
>
> TIA
>
> raj
-----------------------------------------------------------------------
Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422
Facsimile (020) 7487 2670
www.marksandspencer.com
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB. These firms are authorised and regulated by the Financial Services Authority.