Ethereal-users: [Ethereal-users] Question: Excluding Terminal Services or VNC on remote scanning

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Bergin, Rob" <RBergin@xxxxxxxxxxxxxx>
Date: Wed, 8 Oct 2003 15:23:51 -0400

Hi all,

 

First time poster, long time sniffer.

 

I want to know that if I run Ethereal on a remote PC and then display the capture I want a way to exclude out all of the remote control software (i.e. Terminal Services TCP Port 3389.

 

I did some searching and I can see that I can do a capture filter and/or a display filter.  But I can’t get either to work.

 

I tried:  tcp.port != 3389

 

And it has not worked so far.

 

Any thoughts, thanks in advance.

 

Rob