Ethereal-users: Re: [Ethereal-users] help with filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 30 Nov 2000 12:51:11 -0800 (PST)
> You would probably want to capture port 161 (snmp) and port 162 (snmp-trap).
> So using a filter string something like:
> port 161 or port 162

Or

	port snmp or port snmp-trap

$ ypcat services | egrep '16[12]'
snmp-trap       162/udp         snmptrap        # SNMP trap (event) messages
snmp            161/udp                         # Simple Network Mgmt Protocol