Ethereal-users: [Ethereal-users] display filters, how do I say OR? and how do I see only the ini

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: james hanley <jameshanley39@xxxxxxxxxxx>
Date: Thu, 10 Aug 2006 20:20:44 +0100 (BST)
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to wireshark-users@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------
1)
how do I say OR ?
AND is &&
 
for example, I want to say 
tcp.dstport != 3389 "OR" tcp.srcport != 3389
 
2)
how do I see only the initial connections? and just incoming or just outgoing?
 
is there an  easier way than this? (i'm not even sure if this is right)
 
my ip is 192.168.0.2
 
for incoming-
tcp.flags.syn == 1 && tcp.flags.ack==0 && ip.src != 192.168.0.2
 
for outgoing-
tcp.flags.syn == 1 && tcp.flags.ack==0 && ip.src == 192.168.0.2
 
thanks
 

Like being first? Check out the all-new Yahoo! Mail today.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users