Ethereal-users: Re: [ethereal-users] Filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 28 Mar 2000 02:03:24 -0800
> I tried to sniff a CORBA client server connection and failed
> 
> 1. Using the capture filter "port 7654" I got nothing

Odd - if the connection was using port 7654 (or whatever the port was),
that *should* have worked.  (I just tried "port 80", and it found an
HTTP fetch I did, but didn't find any of the streaming MP3 traffic
to/from some other port that's currently playing my favorite radio
station.)

> 2. Using no capture filter, I got my packets, but many others as well.
> 
> So I tried a display filter "protocol==giop" and get an error that the
> filter string is not parsable

For that one, you want a filter of just "giop".