["Oliveras, Michael" <mike.oliveras@xxxxxxxxxxxxx>]

Title: Message

That should work for a display filter...

 

If you want to only *capture* that traffic you could try:

 

tcp port 25 and not host 111.111.111 and not host 222.222.222

 

- Mike

-----Original Message-----
From: Dustin Decker [mailto:dustin.decker@xxxxxxxxxxxxxxxx]
Sent: Friday, September 10, 2004 10:12 AM
To: dustin.decker@xxxxxxxxxxxxxxxx; 'Ethereal user support'
Subject: RE: [Ethereal-users] FW: Accord Holdings Ltd.

Nice typo... that should have read:

tcp.dstport == 25 && ip.src != 111.111.111.111 && ip.src != 222.222.222.222

 

 

---

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Dustin Decker
Sent: Friday, September 10, 2004 9:10 AM
To: 'Ethereal user support'
Subject: RE: [Ethereal-users] FW: Accord Holdings Ltd.

 

You might try this where 111.111.111.111 is the first IP address to exclude, and 222.222.222.222 is the second:

 

tp.dstport == 25 && ip.src != 111.111.111.111 && ip.src != 222.222.222.222

 

Dustin

 

 

---

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Erkan Zeki
Sent: Friday, September 10, 2004 4:10 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] FW: Accord Holdings Ltd.
Importance: High

 

I would like to create a filter which would capture SMTP traffic, this is easy enough but how would I exclude 2 IP addresses on our network from being captured?

 

Erkan Zeki

Technical Operations Engineer

Accord Holdings Ltd.

t 020 8920 9252

 

[snip]