Ethereal-users: Re: [ethereal-users] Filters?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gramirez@xxxxxxxxxx>
Date: Mon, 3 May 1999 12:15:48 -0500
On Mon, May 03, 1999 at 12:07:39PM -0500, Nomad the Wanderer wrote:
> 
> 
>   I just 6.1 and it looks nice.  I'm trying to get it to
> filter trafic from my station "firefly" outbound.  Can anyone
> give me a quick "this is how to set that up"  while I keep digging
> through docs?
> 
> Robert

The man page for tcpdump explains the libpcap filter syntax. This is the
capture filter syntax used in Ethereal.

For IP packets, your filter would be:

src host firefly

For any protocol (IPX, etc.), your filter would be:

ether src xx:xx:xx:xx:xx:xx

where "xx:xx:xx:xx:xx:xx" is the hardware address of your NIC.

--gilbert