Wireshark · Ethereal-users: RE: [Ethereal-users] How to start ethereal with capture filtersen abled already on startup

["Francisco Alcoba (TS/EEM)" <francisco.alcoba@xxxxxxxxxxxx>]

> I know about this possibility but how 
> about several filters at once, should several -f option be provided,
> should only one -f option be provided but for this several fiters
> should be delimited/separated by comma or some other mark
> or any other suggestions?
> 

You'll have to write a filter that covers the situation you want -i.e.,
it is not possible to have ordered lines of filters that apply successively, you need to
convert it to a boolean expression-. What I mean is that you cannot do:

  ip host 3.3.3.3
  ip host 4.4.4.4
  ip host 5.5.5.5

and expect it to mean "capture if host is 3.3.3.3; if not, go to the next line; capture if 
host is 4.4.4.4; if not...". You'll need to use something like:

  ip host 3.3.3.3 or ip host 4.4.4.4. or ip host 5.5.5.5

Regards,

  Francisco