Have you looked at the Ethereal user guide, in the section about "Filtering while Capturing" (http://www.ethereal.com/docs/user-guide/ch03capfilt.html)? It gives a bit of detail.
The TCPdump man page (http://www.tcpdump.org/tcpdump_man.html) also gives quite a bit of detail on capture filters, and is probably your best resource (I'm sure people on this list know of others)
Specifically, if you wanted to filter on all packets to/from a particular IP address, you could say simply:
host 172.16.1.1
OR
ip src 172.16.1.1 or ip dst 172.16.1.1
...for example.
Ian
Stephen Datz wrote:
Do you have any examples of valid capture filters that give the same functionality as the display filters? I'm interested in capturing specific IP addresses.
Stephen Datz WAN Group TNT Logistics North America 10751 Deerwood Park North, Suite 200 Jacksonville, FL 32256 (904) 564-1132 Fax (904) 996-1271
_______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
