Ethereal-users: Re: [Ethereal-users] Filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Sat, 18 Oct 2003 21:45:50 -0400
Hi RBogle,
                                                                                
To clarify my last post, be sure to filter both src and dst ports
to capture both sides of the converstaion.
The complete filter is:
(tcp[0:2] > 0x298 and tcp[0:2]< 0x02EF) or (tcp[2:2] > 0x0298 and tcp[2:2] < 0x02EF)
                                                                                
Mike