Ethereal-users: Re: [Ethereal-users] filter to one IP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 10 Jun 2003 10:22:06 -0700
On Tue, Jun 10, 2003 at 08:12:02AM -0400, Mike Mahar wrote:
> How do I filter all traffic for only one IP address? I read the help,
> but must be doing something wrong. Any help would be appreciated.

Why do you think you're doing something wrong?  What are you doing, and
what is Ethereal doing when you try that?  Without that information, we
can only guess what the problem is.

If you're trying to filter traffic when capturing traffic, rather than
trying to filter traffic that you've already captured, note that the
syntax is not what's described in the help - the "Capture Filters" pane
of the help says you should see the tcpdump manual page for that.  To
capture only traffic to or from a particular IP address, do

	ip host XXX

where XXX is the IP address in question (or a host name that resolves to
that address).