You filter for 'ip.proto==6' i.e. all packets containing an ip header
where the proto field specifies tcp.
I just tried it and it works as it should.
The ICMP packets are shown since they as payload (open the ICMP packets and see)
contain an ip header where this field is 6 (tcp)
i.e. the filtering works.
On Fri, 3 Dec 2004 12:08:20 +0100, Simone Chemelli
<simone.chemelli@xxxxxxxxx> wrote:
>
> "ethereal-users-bounces@xxxxxxxxxxxx" <ethereal-users-bounces@xxxxxxxxxxxx>
> wrote on 03/12/2004 11.20.51:
>
>
>
> > Simone Chemelli wrote:
> >
> > > I'm using ethereal since some month and with the latest update I'm not
> > > able to have filters work correctly. For example during capture a
> filter
> > > like
> > >
> > > "ip.dst == 172.20.20.10"
> > >
> > > shows all traffic and not only the one for this host. With 0.10.6
> > > everything was fine.
> > >
> > > Are you aware of the issue ?
> >
> > I'm not - it worked for me when I tried it.
> >
> > Can you send us a capture file where you saw this problem? On what type
> > of machine are you seeing it?
> >
>
> WindowsXP SP2, Ethereal 0.10.7 and WinPCap 3.1beta4
>
>
>
>
>
> Simone Chemelli
> System integration
>
> Serenissima Informatica S.p.a.
> Via Croce Rossa 5 - 35129 Padova - Italy
> Tel. +39 049 8291111
> Fax +39 049 8291209
>
>
> ---
>
>
> CONFIDENTIAL INFORMATION
>
>
> The information transmitted is intended only for the person or entity to
> which it is addressed and may contain confidential and/or privileged
> material. Any review, retransmission, dissemination or other use of, or
> taking of any action in reliance upon, this information by persons or
> entities other than the intended recipient is prohibited. If you received
> this in error, please contact the sender and delete the material from any
> computer.
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
>
>