Ethereal-users: Re: [Ethereal-users] Finding One Among the Many

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Tue, 10 Aug 2004 16:07:40 -0700 (PDT)
Tom Naves said:
> I have a simple question with respect to using Ethereal.  If I open a .cap
> file that has a bunch of activity in it and I want to concentrate on the
> exchange between a particular source host and destination host, how do I
> filter the unwanted stuff out.

(If it's an exchange, sometimes a given host will be the source and other
times it'll be the destination.)

Try a display filter of, for example:

    ip.host == {first host} && ip.host == {second host}

if the traffic is IPv4-based.