Ethereal-users: [Ethereal-users] BGP filter parsing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Chuck Phillips <chucklp@xxxxxxxxxxxxx>
Date: Mon, 05 Feb 2001 09:55:42 -0500
Hello. I am a new user to Ethereal and currently have 0.8.12
installed on a Linux Redhat 6.2 laptop. I have been
successful in capturing packets and am quite impressed at
the level of decode.

I am attempting to analyze a BGP problem between two
dissimilar routers. When I open the capture filter window, I
am able to enter the key word tcp to see only that traffic
on the wire. However, I would prefer to see only bgp
messages or tcp.port == 179 packets. When I try either of
those syntax forms in the filter window, I get a "can't
parse" message with an unreadable error code.

TIA for any help or guidance. BTW, I am aware that there are
two capture syntax forms but I thought the suntax listed in
the man page for ethereal is the correct one for the capture
window. I have not tried the tcpdump syntax.

Chuck

--
Chuck Phillips
Cyberguard Corporation
(954) 958-3900 ext 3420
(954) 958-3899 fax
(954) 224-6528 cell
8774741434@xxxxxxxxxx
cphillips@xxxxxxxxxxxxxx
chucklp@xxxxxxxxxxxxx