Ethereal-users: [ethereal-users] Trouble with filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Paul L. Lussier" <plussier@xxxxxxxxxxxxxxx>
Date: Thu, 12 Aug 1999 11:50:48 -0400
Hi all,

I'm playing around with ethereal, and just trying to get used to it.  However, 
I apparently don't quite understand how to write effective filters.

For example, I wanted to snoop myself telnetting from my laptop to my Sun.
If I use 'tcp port 23' as a filter, I see all that gets sent from the Sun, but 
nothing that gets sent from the laptop.  So, I'm assuming that telnet is going 
out on a different port than 23.  So I tried to modify the filter to be things 
like:

	tcp port >= 23 and tcp port <= 1024
	tcp port > 22

and other various things, and each returns the error:

	Unable to parse filter string!


Can someone tell me what I'm doing wrong?  Is there a guide on writing filters 
somewhere?  I looked at the man page, but couldn't get a sense of what I was 
doing wrong.

Thanks,
-- 

Seeya,
Paul
----
Please reply to plussier@xxxxxxxxxxxxxxx.  The corp sendmail people insist on
rewriting outgoing mail (including Reply-to: headers!) to send to
'@nortelnetworks.com' which we keep telling them is quite broken, but they
don't listen :)

	    I've been bought, sold, and now given away :)
		 LanCity->Bay Networks->Nortel->Arris

	 If you're not having fun, you're not doing it right!