Ethereal-users: [Ethereal-users] sasser

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Chris T." <k0rnshell@xxxxxxxxxxx>
Date: Tue, 11 May 2004 19:51:22 -0500
I am using ethereal to track down infections on my network and I have a
filter which I found on the internet. My question is how do I tell it not to
listen to certain IP addresses which I know are not infected?





This is the filter how do I tell it not to listen for ip address
172.16.0.175 ?



tcp[13]&3!=0 and (port 139 or port 445)