Ethereal-users: Re: [Ethereal-users] How it captures the data of a group?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 13 Nov 2003 18:23:58 -0800

On Nov 13, 2003, at 12:42 PM, Philip wrote:


you can set filters in ethereal
if you have want to capture packets from a PC, you can set an
IP filter for that specific PC.
like: ip = = 192.168.255.1


No, more like

	ip host 192.168.255.1

if you're talking about a filter used when *capturing* packets.
(If you're talking about a filter to show you packets to or from a given host after you've captured traffic that might have some packets that aren't to or from that host, it's 

	ip.addr == 192.168.255.1

.)
Note also that if that PC isn't the one on which you're running Ethereal, you might have to worry about switched networks or dual-speed hubs: 

	http://www.ethereal.com/faq.html#q5.1