Ethereal-users: Re: [Ethereal-users] Filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: MH <procana@xxxxxxxxxxxxxx>
Date: Sat, 18 Oct 2003 21:19:08 -0400
Hi RBogle,
                                                                                
To clarify my last post, be sure to filter both src and dst ports
to capture both sides of the converstaion.
The complete filter is:
(tcp[0:2] > 0x298 and tcp[0:2]< 0x02EF) or (tcp[2:2] > 0x0298 and tcp[2:2] < 0x02EF)
                                                                                
Mike