Ethereal-users: Re: [Ethereal-users] Help with Live Capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 18 Nov 2001 17:08:33 -0800
On Sun, Nov 18, 2001 at 08:02:55PM -0500, Tom wrote:
> I want to filter out everything but the actual conversation
> from MSN Instant Messenger.

(I said "tell us", not "tell me"; the fact that I responded to your
question doesn't mean I take sole responsibility for the issue.)

What exactly do you mean by "filter out everything but the actual
conversation from MSN Instant Messenger"?

If you mean you only want to see MSN Instant Messenger packets, not
other packets for other protocols, then you have to figure out what TCP
or UDP port number or numbers Instant Messenger uses, and then apply a
display filter to show you only traffic going to or from those ports.

I have no idea what ports MSN Instant Messenger uses (or even whether it
uses TCP or UDP).  If you don't know what ports it uses, you might try a
Google search to see what information you can find about the protocol,
to see if it indicates what port numbers it uses.