Did you look at the FAQ and see the following? Is it possible to see just traffic within my network? Is it possible to see just traffic to/from the internet? You can indeed filter traffic. Have a look at the filter entry in preferences->capture->filter Suppose your network address starts with 213.227 If you only want to see traffic within your network, then the proper syntax is ip and src net 213.227 and dst net 213.227 Or if you want to see connections to/from outside your network then try something like ip and ((not src net 213.227) and dst net 213.227) or (src net 213.227 and (not dst net 213.227)) Filtering is done by libpcap. For the full filter syntax, see the pcap-filter man page or the tcpdump web site http://www.tcpdump.org/
-mmiller On Fri, Aug 6, 2010 at 6:43 AM, Quentin Ducas <[email protected]> wrote: > Etherape filtering is not working? > > > ..or is not well configured. > (Almost certain that it is the latter) > > I want to monitor just one host in my network. > Computer 1 has Etherape installed, OS=Debian Lenny, IP 192.168.55.160 > Computer 2 is the host I want to monitor, OS=WinXP, IP 192.168.55.12 > The network: > Modem -> router (SweexLW055) -> Hub (3Com 3C16170) > -> Comp. 1 > -> Comp. 2 > > Capture Filter is set as : src net 192.168.55.12 dst net 192.168.55.12 > > But still etherape shows the internet-connections from and to computer 1 > (192.168.55.160). > How is it possible to let etherape [i] only [/i] show the connections from > and to the 192.168.55.12 (comp 2) > > Thanks in advance, > Quentin > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
