Title: Message
Scott,
> I run
Ethereal v 0.9.9 on Win2K and am new to ethereal.
>
I am looking for a way to narrow the source IP scope from
the
> 10.0.x.x
network I am on to just 10.0.8.X and even further to a
>
range of IP addresses.
If you want a capture
filter use: net 10.0.8.0 mask
255.255.255.0.
If you want a display
filter use: ip.addr ==
10.0.0.8.0/32
>
Also Can I single out an
IP address to watch?
If you want a capture
filter use: host 10.0.8.1
If you want a display filter
use ip.addr ==
10.0.0.8.1
> I am having a little trouble with
some liberal web surfing going on at work.
> So I would
like to see who is requesting port 80 and also what webpage
> or IP they
are requesting.
Use a capture filter: tcp port 80
once you have your data loaded in
ethereal find an IP address which you think should not be browsing and use
display filter "ip.addr == <ip address>" to filter just this user's
traffic.
HTH
Alistair
Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422
Facsimile (020) 7487 2670
www.marksandspencer.com
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.
