On Mon, Feb 04, 2008 at 08:22:16AM -0800, jacob c wrote: > I am running Wireshark 0.99.7. I tried using the sample URL capture > filter shown on the wiki but it always gives me an error when I > stopped the capture.. It looks like this: "host www.cnn.com and not > (port 80 or port 25) " I also tried "host www.cnn.com" but it didn't > seem to like that either. > > Can someone show me an example "URL" capture filter?
Those *capture filters* should work fine in the capture filter box within the (Capture) Options dialog. The filter box in the main Wireshark window is for *display filters*, which have a different format entirely. If you are in fact putting the capture filters in the capture filter field, please send us your error message. Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users