Ethereal-users: Re: [Ethereal-users] How to capture packets with defined string in data?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 16 Nov 2004 12:31:11 +0100
Dabasinskas, Martynas wrote:

Question: is it possible to set some capture filter to capture only these packets with 123 inside ? For this moment I have to capture all TCP packets into file and after that using display filter search for string 123 in the file, but it is not a good idea for me, because traffic is realy big,

You might want to look at ngrep: http://ngrep.sourceforge.net/

--

		Regards,

			Marco.