Welcome to Ethereal. See http://www.ethereal.com/faq.html#q5.3:
---------------------------------------------------------- Q 5.3: I can set a display filter just fine, but capture filters don't work. A: Capture filters currently use a different syntax than display filters. Here's the corresponding section from the ethereal(1) man page: "Display filters in Ethereal are very powerful; more fields are filterable in Ethereal than in other protocol analyzers, and the syntax you can use to create your filters is richer. As Ethereal progresses, expect more and more protocol fields to be allowed in display filters. Packet capturing is performed with the pcap library. The capture filter syntax follows the rules of the pcap library. This syntax is different from the display filter syntax." The capture filter syntax used by libpcap can be found in the tcpdump(8) man page. (http://www.ethereal.com/tcpdump.8.html) ---------------------------------------------------------- Hint: host 131.107.31.252 -- Richard Urwin, Private "No 9000 series computer has ever made a mitsake or corrubiteddatatato." -----Original Message----- From: Grégory LECUYER [mailto:[EMAIL PROTECTED] Sent: 19 November 2002 12:42 To: [EMAIL PROTECTED] Subject: [Ethereal-users] Win32/Ethereal 0.9.2/WinPcap_2_3 Hello, I've bought a book named "Local Area NETWORK" from Micro Application (FRANCE/BELGIQUE), there is a CD-ROM with it. On this CD I've found a very great apps ETHEREAL, very very great !!! To be perfect I just need to create a filter what I can't do , In the filter param I put : ip.addr == 131.107.31.252 (my PC's LAN address) Then when I start the capture by OK it gives me "Unable to Parse filter string (parse error)" With an empty string for the filter param I can analyze everything is going on our NETWORK. What can I do ? Sincerely, and thanks again for this very very great freeware. GREGORY LECUYER _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com ________________________________________________________________________
5.3 I can set a display filter just fine, but capture filters don't work..url
Description: Binary data
