Ethereal-users: RE: [Ethereal-users] How to start ethereal with capture filtersen abled already

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Francisco Alcoba (TS/EEM)" <francisco.alcoba@xxxxxxxxxxxx>
Date: Thu, 16 Dec 2004 11:00:38 +0100
> I know about this possibility but how 
> about several filters at once, should several -f option be provided,
> should only one -f option be provided but for this several fiters
> should be delimited/separated by comma or some other mark
> or any other suggestions?
> 

You'll have to write a filter that covers the situation you want -i.e.,
it is not possible to have ordered lines of filters that apply successively, you need to
convert it to a boolean expression-. What I mean is that you cannot do:

  ip host 3.3.3.3
  ip host 4.4.4.4
  ip host 5.5.5.5

and expect it to mean "capture if host is 3.3.3.3; if not, go to the next line; capture if 
host is 4.4.4.4; if not...". You'll need to use something like:

  ip host 3.3.3.3 or ip host 4.4.4.4. or ip host 5.5.5.5

Regards,

  Francisco