Muchos Gracias Senior !!!!!
you were right on the money.
Dale
Guy Harris wrote:
> > I keep seing reproductions off the tcpdump manpage (I use tcpdump just
> > fine) in answer to capture filter questions. However I get parse errors
> > from etheral even when using a tcpdump command line which works
>
> There's a bug in "libpcap" that can cause parses of valid filter
> expressions to fail if, prior to that, a parse failed - for example, if
> you enter an invalid filter in the Capture/Start window, subsequent
> filters may fail even if they're valid. That's not an issue for
> "tcpdump", as it only parses one filter within one invocation of
> "tcpdump", but it *is* an issue for Ethereal.
>
> Did you get parse errors on the *first* expression you tried?
>
> I just tried
>
> port 53
>
> on an Ethereal here, and it did, in fact, capture only DNS packets.
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the HPA Postmaster: postmaster@xxxxxxxxxx.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses. You should however
continue to execute your normal virus checking procedures.
www.hpa.com.au
**********************************************************************
begin:vcard
n:Roberts;Dale
tel;work:(02) 93119602
x-mozilla-html:FALSE
org:HPA;Unix Administration
adr:;;2 Military Road Mattraville;Sydney;NSW;;Australia
version:2.1
email;internet:Dale.Roberts@xxxxxxxxxx
title:Systems Administrator
x-mozilla-cpt:;0
fn:Dale Roberts
end:vcard
