Paul Barbeau wrote:
> I am trying to write a filter that will collect data from two different
> machines and two different ports. In looking at the Wiki and manual the
> following line should work
>
> (host 55.55.55.49 and port 2433) or (host 55.55.55.246 and port 5786)
That matches
a packet to or from 55.55.55.49 and to or from TCP or UDP port 2433
or
a packet to or from 55.55.55.246 and to or from TCP or UDP port 5786
> As well this should work
>
> port 2433 and (host 55.55.55.49 or host 55.55.55.63)
That matches
a packet to or from TCP or UDP port 2433 and (to or from 55.55.55.49
or 55.55.55.63)
> however they do not. They work separately however when I add the
> brackets and join them.
So whey they "don't work", what is the filter expression you're using?
And when you say they "work separately" when you "add the brackets and
join them", what is the filter expression you're using?
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
