Ethereal-users: Re: [Ethereal-users] Bugs

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 28 Feb 2006 16:55:26 +0100
On Mon, Feb 27, 2006 at 04:52:58PM -0500, Donald Woeltje wrote:
> In the Windows version of the 0.10.14 release, the capture filter
> doesn't function. I set it, leave the dialog box, come back into the
> dialog box, and it's unset. I set it again, I do a save, I close the
> dialog box, I come back in, and it's unset again. I set it again, I save
> it, I even leave the dialog box open, and then I do a capture. IT
> CAPTURES EVERYTHING!!!!!!!!!! The capture filter DOES NOT WORK.

With the "Capture Filters" dialogue, you are able to pre-define
capture filters and give them a name. You will have to *select* a
defined capture-filter (or build one ad-hoc) in the "Capture options"
dialogue box, just click on the "Capture filter" button or define
one yourself in the text-area next to it.


> Then I thought, well....maybe it's not sophisticated enough to filter
> during the capture (by setting the filter in advance). Maybe it can only
> filter out the unwanted captured packets, from the display. So I ran a
> capture and then tried to filter the captured packets after the fact.
> Nope. That doesn't work, either, so that must not be it.

If you want to apply a filter *after* capturing, you will need
to use a display filter, not a capture filter.


> The product isn't much good without a working capture filter.

That's why ethereal is so great, it has good capture filters and
it's display-filters are unbeaten by any other product IMHO.

I hope this helps, otherwise there is always the friendly manual
(available on www.ethereal.com)


Good luck,   Sake