Ethereal-users: Re: [ethereal-users] ethereal for only see the traphique

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gramirez@xxxxxxxxxx>
Date: Wed, 16 Aug 2000 09:46:26 -0500
On Wed, 16 Aug 2000 05:15:09 noel tirolle wrote:
> 
> how to make to use ethereal for only see the traphique .
> it is posible with the actual but no for long time ...
> after a time the buffer is full and nothing can be doing ...

It sounds like you need to use capture filters to limit
the amount of traffic that Ethereal actually captures.

In the capture dialogue window you can type a capture filter.
The filter syntax is that of tcpdump (actually, it's libpcap's
syntax, but it's documented in tcpdump's man page). If on a
Unix system, read the tcpdump manpage. On a Windows sytem,
the WinDump docs should have the correct syntax.

--gilbert