Ethereal-users: RE: [Ethereal-users] Newbie Needs Help, Please

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Fri, 2 Jul 2004 11:50:56 -0700 (PDT)
Jim Bonaiuto said:
> I would like to see all TCP/IP traffic going to and from our main router
> to our three satellite routers.  The IP address for the main router is
> 10.1.1.1, the three satellite routers are: 10.2.1.1, 10.3.1.1 and
> 10.4.1.1.

    ((host 10.1.1.1 and 10.2.1.1) or (host 10.1.1.1 and 10.3.1.1) or (host
10.1.1.1 and 10.4.1.1)) and tcp

should work as a capture filter.  (It should capture *only* TCP traffic
between 10.1.1.1 and 10.{2,3,4}.1.1.)