Ethereal-users: Re: [Ethereal-users] using capture filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Tue, 21 Sep 2004 19:56:55 -0700 (PDT)
Town, Sue - ETG said:
> smtp port 25 and host 10.x.x.x
>
> and am getting a parse error

    tcp port 25 and host 10.x.x.x

or possibly

    tcp port smtp and host 10.x.x.x

(where I'm assuming that "10.x.x.x" is actually a complete IP address).

SMTP has no port numbers, so there's no "smtp port XXX"; TCP has port
numbers, so you'd use "tcp port XXX".  On at least some systems the "XXX"
can be symbolic, e.g. "smtp" for port 25.