'Re: [Ethereal-users] Capture filter for more than one port'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: ethereal-users
Subject: Re: [Ethereal-users] Capture filter for more than one port
From: Jeffrey Ross <jeff () bubble ! org>
Date: 2005-12-31 4:29:13
Message-ID: 43B60919.7060804 () bubble ! org
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

try:

tcp port 80 *or *tcp port 25

Edward Stafford wrote:

>I've started playing with ehtereal and want to capture port 25 and port
>80 traffic.
>I tried using:
>Tcp port 80 and tcp port 25
>Tcp port 80 and port 25
>Tcp port 80 && tcp port 25
>Tcp port 80 && port 25
>
>But nothing is captured.
>Capturing single ports works fine.
>Tcp port 25 alone works
>Tcp port 80 alone works
>
>What is the correct way to capture more than one port?
>
>This is on a switched network using a monitoring port.
>
>  
>

[Attachment #5 (text/html)]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
 <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
 <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
try: 
 
tcp port 80 or tcp port 25 
 
Edward Stafford wrote:
<blockquote
 cite="mid7BFF99AB9F482640ADB4BAA70A6D6CD20268C8@mail.newmancom.com"
 type="cite">
 <pre wrap="">I've started playing with ehtereal and want to capture port 25 and port
80 traffic.
I tried using:
Tcp port 80 and tcp port 25
Tcp port 80 and port 25
Tcp port 80 &amp;&amp; tcp port 25
Tcp port 80 &amp;&amp; port 25

But nothing is captured.
Capturing single ports works fine.
Tcp port 25 alone works
Tcp port 80 alone works

What is the correct way to capture more than one port?

This is on a switched network using a monitoring port.

  </pre>
</blockquote>
<br>
</body>
</html>

_______________________________________________
Ethereal-users mailing list
Ethereal-users@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-users

[prev in list] [next in list] [prev in thread] [next in thread] 