Ethereal query

Smooth · 09-29-2003, 05:02 AM

Greetings!

How to Restrict ‘ethereal’ to show networking traffic with respect to a particular IP address using command line?

I tried #ethereal -f ip.addr==130.*.*.*

but the above command does not start packet capture.

2) how to implement the same using tcpdump?

cetialphav · 09-29-2003, 08:13 PM

Does this do what you want?

Code:

[root@perl todd]# ethereal -i eth0 -k -f "net 192.168.10.0/24"
[root@perl todd]#

For tcpdump, it is similar.

Code:

[root@perl todd]# /usr/sbin/tcpdump -i eth0 net 192.168.10.0/24
tcpdump: listening on eth0
20:07:13.893290 perl.631 > 255.255.255.255.631: udp 134 (DF)
20:07:44.923567 perl.631 > 255.255.255.255.631: udp 134 (DF)

2 packets received by filter
0 packets dropped by kernel
[root@perl todd]#