Ethereal-users: Re: [Ethereal-users] Capture filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Hansang Bae <hbae@xxxxxxxxxx>
Date: Thu, 30 Mar 2006 19:28:21 -0500
On 05:58 AM 3/29/2006, michael butler wrote:
>I am waiting for the delivery of my Ethereal packet sniffing book from
>amazon. But in the mean time I was wondering if I can set a filter to
>capture only packets sent/received from IPs in ranges? Example
>88.0.0.0-90.255.255.255.


"net 88.0.0.0 255.0.0.0" will work.

"ip.addr==.." syntax is only valid as display filters.

You can lookup the syntax for tcpdump capture filters and you'll be all set.

hsb