Wireshark · Ethereal-users: Re: [Ethereal-users] unable to parse filter string (parse error)

[Guy Harris <guy@xxxxxxxxxx>]

> i receive "unable to parse filter string (parse error)" with the following
> filter:
> ip.src == 192.168.80.113 or ip.dst == 192.168.80.113
> 
> what's wrong with it?

It's not a valid capture filter.

It *is* a valid display filter, but the syntax for capture filters (the
parser for which is in the libpcap library, not Ethereal) and the syntax
for display filters (the parser for which is in Ethereal; the capture
filter syntax would not be sufficient to do all you can do with display
filters) are not the saem.

The capture filter would be

	host 192.168.80.113

(and the display filter would be

	ip.addr == 192.168.80.113

i.e. you don't have to separately check the source and destination
addresses in either case).