Ethereal-dev: Re: [ethereal-dev] packet capture from switches and other RMON devices

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: guy@xxxxxxxxxx (Guy Harris)
Date: Thu, 13 May 1999 14:38:07 -0700 (PDT)
> I guess I was unclear.  Let's say we have one device running Ethereal and 
> three capture devices at 10.1.9.65, 10.1.10.65 and 10.1.11.65.

Where a "capture device" is something like a switch that supports RMON,
so that:

> What I mean is 
> I'd like a filter saying "collect in Ethereal only packets from the capture 
> device whose IP is 10.1.9.65".

...this means "collect packets going *through* the device whose IP is
10.1.9.65" (some of which could conceivably be generated by, or sent
directly to, that device, but not *all* of which are likely to be
generated by, or sent to, that device) rather than "collect packets
going to or from the end-node whose IP is 10.1.9.65"?