Ethereal-users: Re: [Ethereal-users] capture filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 16 Jan 2004 17:01:12 -0800

On Jan 16, 2004, at 11:13 AM, Kris Pratt wrote:

I just installed version 0.10.0 on a WIN32 platform (win2k).  After reading the help and searching online documentation, I can not get a simple capture filter to work.  All I want to do is capture all packets with a certain MAC address.  It looks like ether aa.bb.cc.dd.ee.ff should do it but all I get is a parse error.  Any ideas?

	ether host aa.bb.cc.dd.ee.ff

"ether aa.bb.cc.dd.ee.ff" isn't valid without "host" - there's also "ether proto", for example, so "ether" by itself isn't sufficient.