Ethereal-users: [Ethereal-users] Re: Welcome to the "Ethereal-users" mailing list (Digest mode)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Bei Zhang (Robert)" <bz9p@xxxxxxxxxxxxxxx>
Date: Tue, 13 Nov 2001 22:55:41 -0500 (EST)
Hi, All,

I'm pretty new to Ethereal, and now I have the following question:

ethereal -f host 10.0.1.11 and ip proto \tcp

doesn't work as it's expected, it will start Ethereal, but in Capture
Preference Dialog, the capture Filter is set to "host" instead of "host
10.0.1.11 and ip proto \tcp". It seems that only the first string after
"-f" is put into the capture Filter. Did I do something wrong here?

I'm using Ethereal win32 version, WinPcap 2.3 beta on Windows98, actually
Ethereal works fine on my machine, I just want to define capture filter
from the commandline, since it should have the same syntax as tcpdump. And
then I found out that I can not define capture Filter from the command
line. That's the situation.

Thanks,

Robert