Ethereal-users: [Ethereal-users] Newbie Tethereal syntax ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Janet Norton <cjnorton@xxxxxxxx>
Date: Wed, 14 Apr 2004 14:22:09 -0400
I am trying to use tethereal to capture packets going to a printer on my corporate network, so I can automate a non-interactive process to collect this data.
 
I have not been successful in creating a Tethereal capture filter to collect data from a specific ip using "-f".  I keep getting syntax error.  I also tried using "-z" as shown in Tethereal man pages.
 
tethereal -z io,stat,1,ip.addr==172.16.0.3 -a duration:10 -w outputfile
 
But I still get other ip traffic in outputfile.  All I really want is the data from TCP stream as shown in Ethereal capture results. 
 
I would like to create Tethereal filter for ip.addr of interest and tcp.port eq 515 to streamline the collected data.  Can someone help me with the syntax so I can create the correct capture filter.
 
Thanks!!!