Ethereal-users: RE: [Ethereal-users] Capture Filter - Multiple Hosts

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "King, John (Greg) (LMIT-HOU)" <Greg.King@xxxxxxxx>
Date: Thu, 11 May 2006 12:06:38 -0500
use 'or',  not 'and'.
 
tethereal -i eth1 -n -q -t a -w /data/test -f "host x.x.x.x or host x.x.x.2"
 
-Greg


From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Steve Sneed (Home Loan Center)
Sent: Thursday, May 11, 2006 11:44 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Capture Filter - Multiple Hosts

I want to create a capture filter for 4 IP addresses.  I want to capture packets on a spanned port that have only these 4 addresses as source or destination IP’s.

 

I keep getting syntax errors.

 

I have tried host x.x.x.x and host x.x.x.x and host x.x.x.x and host x.x.x.x

 

Doesn’t work

 

Please help