Ethereal-dev: Re: [ethereal-dev] packet capture from switches and other RMON devices

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: John McDermott <jjm@xxxxxxxxxx>
Date: Thu, 13 May 99 08:08:55
--- On Wed, 12 May 1999 17:29:12 -0700 (PDT)  Guy Harris <guy@xxxxxxxxxx> 
wrote:

>> I was thinking of a filter saying "I only want the IP UDP datagrams from 
>> remote capture device 10.1.9.65".
>
>I.e., "capture only UDP datagrams from device 10.1.9.65" (that's a
>capture filter), or "once I've captured datagrams from device 10.1.9.65,
>show me only the UDP datagrams" (that's a display filter)?

I guess I was unclear.  Let's say we have one device running Ethereal and 
three capture devices at 10.1.9.65, 10.1.10.65 and 10.1.11.65. What I mean is 
I'd like a filter saying "collect in Ethereal only packets from the capture 
device whose IP is 10.1.9.65".  That capture device could have a capture 
filter of its own and likewise Ethereal could have a display filter of its 
own.

--john

-------------------------------------
Name: John McDermott
VOICE: +1 505/377-6293 FAX +1 505/377-6313
E-mail: John McDermott <jjm@xxxxxxxxxx>
Writer and Computer Consultant
-------------------------------------