Ethereal-users: Re: [Ethereal-users] Finding One Among the Many

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Michael Nguyen" <ethereal@xxxxxxxxxxxxx>
Date: Tue, 10 Aug 2004 16:07:03 -0700
> I have a simple question with respect to using Ethereal.  If I open a .cap
> file that has a bunch of activity in it and I want to concentrate on the
> exchange between a particular source host and destination host, how do I
> filter the unwanted stuff out.

http://www.ethereal.com/docs/dfref/

[ -R display filter expression ] 

tethereal -r network.cap -R 'ip.addr==1.2.3.4&&tcp.port=137'


Michael