["Ridgeway, Alan" <Douglas.Ridgeway@xxxxxx>]

Title: Display filter

Hi All

I have ethereal 9.16 on Windows 2000 SP4.
I was working with the Display filters and want to know if
a found a broken feature or if I just didn't understand what I was doing.

After I capture traffic, I can go to the Display Filter field and enter the following:

"not browser" This will filter all protocols related to the windows network browser
"ip.adder eq xxx.xxx.xxx.xxx" This filter will only display the IP address defined in after the "eq"

I can not however get this filter to work with
"ip.adder eq <hostname>"
"ip.scr eq <hostname>"
"ip.dst eq <hostname>"
 
But the help file shows an example using the host name or the IP address.
http://www.ethereal.com/ethereal-filter.4.html
IPv4 addresses can be represented in either dotted decimal notation, or by using the hostname:
    ip.dst eq www.mit.edu
    ip.src == 192.168.1.1

So please confirm if I am just being a luser or if I found a legit issue.

Thanks
Alan Ridgeway SANS: GSEC, GCFW
Computer Associates
eTrust Research and Development
riddo01@xxxxxx