Wireshark-dev: Re: [Wireshark-dev] Getting destination IP

From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Thu, 22 Mar 2007 09:31:37 +0800


sara vanan wrote:

I saw that today only and I tried executing in Linux OS but it gives error( Invalid filter).

Note that "dns && ip.addr == 192.168.16.67 && ip.addr == 192.168.16.106" is a *display* filter which is different from a *capture* filter. E.g., you can type it into the filter field in Wireshark or use it with the "-R" command line argument to Wireshark or 'tshark' but you cannot use it with the "-f" argument to either program.

HTH,
-J