On Wednesday, June 25, 2003, at 11:28AM, mike wrote:
I have a capture filter primer on my website: http://home.insight.rr.com/procana
You might want to rename it "Designing Capture Filters for tcpdump/Ethereal/Snort/etc.", as it applies to any program using libpcap, not just Ethereal.