RE: Tethereal network capture

["Jack Daniel" <user=1488@nabble.blu.org>]

 FWIW, Tetheral is technically obsolete, it was abandoned when Ethereal was 
abandoned last year.  Tshark is the CL version of Wireshark, the new name 
for the project. 

I think Kristian has spotted the syntax error in your command. 

Jack 



> -----Original Message----- 
> From: Kristian Erik Hermansen [mailto:[hidden email]] 
> Sent: Tuesday, September 25, 2007 4:49 PM 
> To: Dave Peters 
> Cc: [hidden email] 
> Subject: Re: Tethereal network capture 
> 
> 
> On 9/25/07, Dave Peters <[hidden email]> wrote: 
> > I try to use Tethereal to capture the network. I use 
> > this command to capture for the only host. However, it 
> > didn't work and capture everything. What's wrong on 
> > this? Can anyone help? 
> > 
> > tethereal -z io,stat,10,ip.addr==192.168.2.1> file.log 
> 
> What packets were not captured?  Maybe looks like you tried to snag 
> everything goint to the gateway -- some packets may be destined for 
> broadcast 255.255.255.255 or 192.168.2.255 or multicast 224.0.0.1 etc 
> ... 
> -- 
> Kristian Erik Hermansen 
> 
> -- 
> This message has been scanned for viruses and 
> dangerous content by MailScanner, and is 
> believed to be clean. 
> 
> _______________________________________________ 
> Discuss mailing list 
> [hidden email] 
> http://lists.blu.org/mailman/listinfo/discuss
>