Wireshark-dev: Re: [Wireshark-dev] [Wireshark-commits] rev 20955: /trunk/docbook/wsug_src/ /trunk/docbook/wsug_src/: WSUG_chapter_capture.xml

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Thu, 01 Mar 2007 22:32:12 +0100

sfisher@xxxxxxxxxxxxx wrote:

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=20955

User: sfisher
Date: 2007/03/01 09:08 PM

Log:
 Fix bug #1409:

There is an error in the page:

 http://wireshark.org/docs/wsug_html_chunked/ChCapCaptureFilterSection.html

According to Example 4.2, the filter 'tcp port 23 and not host 10.0.0.5'

 captures all telnet traffic not from 10.0.0.5. But this filter also discards
 traffic to 10.0.0.5. Either you use this filter to capture all telnet traffic
 not to and not from 10.0.0.5 or you use filter 'tcp port 23 and not src host
 10.0.0.5'.

Directory: /trunk/docbook/wsug_src/
  Changes    Path                        Action
  +1 -1      WSUG_chapter_capture.xml    Modified

_______________________________________________
Wireshark-commits mailing list
Wireshark-commits@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-commits

Hi!

My fault, that this example was wrong.

While technically correct, your fix don't seem to fit well with my intention of the text ;-)

It might be better to use the term "to/from" and use the old filter string. This way it keeps to explain the not operator - and only the not operator.

To explain more things like src/dst and alike, some new examples should be added at the XXX mark instead.

On the other hand, this section needs a review/rewrite anyway ...

Regards, ULFL