[Jeffrey Ross <jeff@xxxxxxxxxx>]

try:

tcp port 80 or tcp port 25

Edward Stafford wrote:

I've started playing with ehtereal and want to capture port 25 and port
80 traffic.
I tried using:
Tcp port 80 and tcp port 25
Tcp port 80 and port 25
Tcp port 80 && tcp port 25
Tcp port 80 && port 25

But nothing is captured.
Capturing single ports works fine.
Tcp port 25 alone works
Tcp port 80 alone works

What is the correct way to capture more than one port?

This is on a switched network using a monitoring port.