Ethereal-users: Re: [Ethereal-users] unable to parse filter string (parse error)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 4 Feb 2002 12:49:38 -0800 (PST)
> i receive "unable to parse filter string (parse error)" with the following
> filter:
> ip.src == 192.168.80.113 or ip.dst == 192.168.80.113
> 
> what's wrong with it?

It's not a valid capture filter.

It *is* a valid display filter, but the syntax for capture filters (the
parser for which is in the libpcap library, not Ethereal) and the syntax
for display filters (the parser for which is in Ethereal; the capture
filter syntax would not be sufficient to do all you can do with display
filters) are not the saem.

The capture filter would be

	host 192.168.80.113

(and the display filter would be

	ip.addr == 192.168.80.113

i.e. you don't have to separately check the source and destination
addresses in either case).