Ethereal-users: RE: [Ethereal-users] How to start ethereal with capture filtersen abled already

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Francisco Alcoba (TS/EEM)" <francisco.alcoba@xxxxxxxxxxxx>
Date: Thu, 16 Dec 2004 11:00:38 +0100
> I know about this possibility but how 
> about several filters at once, should several -f option be provided,
> should only one -f option be provided but for this several fiters
> should be delimited/separated by comma or some other mark
> or any other suggestions?
> 

You'll have to write a filter that covers the situation you want -i.e.,
it is not possible to have ordered lines of filters that apply successively, you need to
convert it to a boolean expression-. What I mean is that you cannot do:

  ip host 3.3.3.3
  ip host 4.4.4.4
  ip host 5.5.5.5

and expect it to mean "capture if host is 3.3.3.3; if not, go to the next line; capture if 
host is 4.4.4.4; if not...". You'll need to use something like:

  ip host 3.3.3.3 or ip host 4.4.4.4. or ip host 5.5.5.5

Regards,

  Francisco