If all you can see *without filters* is broadcast packets, then that is a
sign that you are on
some sort of switch rather than shared media (hub), or that the driver for
your interface card
doesn't support promiscuous mode. Filters let you see subsets of your data,
not supersets.
--gilbert
Annelie.A.Faber@xxxxxxxx@ethereal.com on 12/19/2000 07:32:29 AM
Sent by: ethereal-users-admin@xxxxxxxxxxxx
To: ethereal-users@xxxxxxxxxxxx
cc:
Subject: [Ethereal-users] Questions about filters etc
Hi!
When we are trying to use ethereal with filters, all we can see is UDP
broadcast packets how to do to see for ex. TCP or other packets? We
used an example "filter string : ip[19]&0xff = 0xff" is there another
filter string that could be used?
We can´t save the files we´ve captured on disk how to do it???
Grateful for a quick answer!
Annelie and Susanne
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
