Wireshark · Ethereal-users: [Ethereal-users] sasser

["Chris T." <k0rnshell@xxxxxxxxxxx>]

I am using ethereal to track down infections on my network and I have a
filter which I found on the internet. My question is how do I tell it not to
listen to certain IP addresses which I know are not infected?





This is the filter how do I tell it not to listen for ip address
172.16.0.175 ?



tcp[13]&3!=0 and (port 139 or port 445)