Wireshark · Ethereal-users: RE: [Ethereal-users] Filter Syntax

["David Peat" <rustyp@xxxxxxxxx>]

 I tried that but the field stays red (meaning invalid) and I receive the error "@domain.com" is neither a field nor a protocol name.

I should point out that this is a post filter, meaning I already have a trace and am trying to apply a filter to that.

Thanks for your help!

Dave

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:
ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Davide Schiera
Sent: Friday, June 09, 2006 11:15 AM
To: 'Ethereal user support'
Subject: R: [Ethereal-users] Filter Syntax

Hi,
you can try with the filter '
smtp.req.parameter contains "@domain.com"', this will select requests with both the sender and the recipient from '@domain.com'; the smtp.req.parameter
 string contains 'FROM' to indicate the sender and 'TO' to indicate the recipient.

Ciao


Davide

> -----Messaggio originale-----
> Da: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] Per conto di David Peat
> Inviato: giovedì 8 giugno 2006 23.56
> A: 
ethereal-users@xxxxxxxxxxxx
> Oggetto: [Ethereal-users] Filter Syntax
> 
> Hello,
> 
> I am not too familiar with Ethereal's filter syntax and am hoping 
> someone can help me.
> 
> I need to create a filter to look at SMTP traffic that has BOTH the 
> sender and recipient with the same domain name.
> 
> For example:
> 
> Sender is 
joe@xxxxxxxxxxx and recipient is mike@xxxxxxxxxxx.
> 
> Thanks in advance!
> 
> Dave
> 
> 

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users