Ethereal-users: [Ethereal-users] Quick filter question (yes, we've all heard it before...)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronald Prague" <rprague@xxxxxxxxxxxxxxx>
Date: Fri, 30 May 2003 08:52:06 -0700
I've got a quick question on capture filters.

I'm capturing on a specific set of ports with tethereal for the FIX
protocol, what I don't want are the ACK packets captured...

The command line I'm using looks as follows:

[ether@empire /home/ether/captures]# tethereal -i eri0 -f "port 51209 ||
port 51266 && len >= 0" -w outputfile

As I understand that statement, it should only capture packets on those two
ports(that works) and only packets > 0 length(ACK packets are mostly 0
length, right?)...

Yet its still capturing all the ACK packets.

Help!