Ethereal-users: RE: [Ethereal-users] FW: Accord Holdings Ltd.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Oliveras, Michael" <mike.oliveras@xxxxxxxxxxxxx>
Date: Fri, 10 Sep 2004 11:05:27 -0400
Title: Message
That should work for a display filter...
 
If you want to only *capture* that traffic you could try:
 
tcp port 25 and not host 111.111.111 and not host 222.222.222
 
- Mike
-----Original Message-----
From: Dustin Decker [mailto:dustin.decker@xxxxxxxxxxxxxxxx]
Sent: Friday, September 10, 2004 10:12 AM
To: dustin.decker@xxxxxxxxxxxxxxxx; 'Ethereal user support'
Subject: RE: [Ethereal-users] FW: Accord Holdings Ltd.

Nice typo... that should have read:

tcp.dstport == 25 && ip.src != 111.111.111.111 && ip.src != 222.222.222.222

 

 

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Dustin Decker
Sent: Friday, September 10, 2004 9:10 AM
To: 'Ethereal user support'
Subject: RE: [Ethereal-users] FW: Accord Holdings Ltd.

 

You might try this where 111.111.111.111 is the first IP address to exclude, and 222.222.222.222 is the second:

 

tp.dstport == 25 && ip.src != 111.111.111.111 && ip.src != 222.222.222.222

 

Dustin

 

 

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Erkan Zeki
Sent: Friday, September 10, 2004 4:10 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] FW: Accord Holdings Ltd.
Importance: High

 

I would like to create a filter which would capture SMTP traffic, this is easy enough but how would I exclude 2 IP addresses on our network from being captured?

 

Erkan Zeki

Technical Operations Engineer

Accord Holdings Ltd.

t 020 8920 9252

 

[snip]