[clug-talk] Ethereal

Michael Gale michael.gale at bluesuperman.com
Mon Mar 28 21:04:38 PST 2005

hmmm ... well Ethereal uses the same syntax as tcmdump so it should be:

port 110 or port 25 and host X.X.X.X

If that does not work you may have to run them individually like:

port 25 and host X.X.X.X


Jesse Kline wrote:
> On Sun, 2005-27-03 at 20:32 -0700, Michael Gale wrote:
>>Which I find usually is not the case, if you want to capture local 
>>packets you can start up Ethereal, click on start capture and at in / 
>>create some filters and then start capturing.
> I have X on the box. Do you know what the filter would look like to
> capture pop and smtp traffic from xxx.com?
> Jesse
> _______________________________________________
> clug-talk mailing list
> clug-talk at clug.ca
> http://clug.ca/mailman/listinfo/clug-talk_clug.ca
> Mailing List Guidelines (http://clug.ca/ml_guidelines.php)
> **Please remove these lines when replying

More information about the clug-talk mailing list