display filters, how do I say OR? and how do I see only the initial connections?
james hanley <[email protected]> Thu, 10 Aug 2006 20:20:44 +0100 (BST)
| Newsgroups | gmane.network.ethereal.user |
|---|---|
| Message-ID | <[email protected]> |
------------------- The Ethereal project is being continued at a new site. Please go to http://www.wireshark.org and subscribe to [email protected]. Don't forget to unsubscribe from this list at http://www.ethereal.com/mailman/listinfo/ethereal-users ------------------- 1) how do I say OR ? AND is && for example, I want to say tcp.dstport != 3389 "OR" tcp.srcport != 3389 2) how do I see only the initial connections? and just incoming or just outgoing? is there an easier way than this? (i'm not even sure if this is right) my ip is 192.168.0.2 for incoming- tcp.flags.syn == 1 && tcp.flags.ack==0 && ip.src != 192.168.0.2 for outgoing- tcp.flags.syn == 1 && tcp.flags.ack==0 && ip.src == 192.168.0.2 thanks --------------------------------- Like being first? Check out the all-new Yahoo! Mail today. _______________________________________________ Ethereal-users mailing list [email protected] http://www.ethereal.com/mailman/listinfo/ethereal-users