On Mon, Feb 27, 2006 at 04:52:58PM -0500, Donald Woeltje wrote:
> In the Windows version of the 0.10.14 release, the capture filter
> doesn't function. I set it, leave the dialog box, come back into the
> dialog box, and it's unset. I set it again, I do a save, I close the
> dialog box, I come back in, and it's unset again. I set it again, I save
> it, I even leave the dialog box open, and then I do a capture. IT
> CAPTURES EVERYTHING!!!!!!!!!! The capture filter DOES NOT WORK.
With the "Capture Filters" dialogue, you are able to pre-define
capture filters and give them a name. You will have to *select* a
defined capture-filter (or build one ad-hoc) in the "Capture options"
dialogue box, just click on the "Capture filter" button or define
one yourself in the text-area next to it.
> Then I thought, well....maybe it's not sophisticated enough to filter
> during the capture (by setting the filter in advance). Maybe it can only
> filter out the unwanted captured packets, from the display. So I ran a
> capture and then tried to filter the captured packets after the fact.
> Nope. That doesn't work, either, so that must not be it.
If you want to apply a filter *after* capturing, you will need
to use a display filter, not a capture filter.
> The product isn't much good without a working capture filter.
That's why ethereal is so great, it has good capture filters and
it's display-filters are unbeaten by any other product IMHO.
I hope this helps, otherwise there is always the friendly manual
(available on www.ethereal.com)
Good luck, Sake