Wireshark · Ethereal-users: Re: [Ethereal-users] Questions

[Jack Jackson <jack@xxxxxxxxxxxxxxx>]

At 01:05 PM 5/3/2005, Tom Potempa wrote:
> Can I create a filter or trap to capture traffic from 1 IP address to another.
>
> For example: - Capture all IP traffic from 10.0.217.10 to 10.0.217.100
>
> I cannot figure out how to set this up using the Ethereal configuration or 
> filters - someone told me I should be able to do this....

A capture filter of:

src host 10.0.217.10 and dst host 10.0.217.100

would capture traffic from 10.0.217.10 to 10.0.217.100.  If what you really 
meant was traffic between those two addresses:

host 10.0.217.10 and host 10.0.217.100

Did you look at the documentation at 
<http://www.ethereal.com/docs/user-guide/ChCapCaptureFilterSection.html> or 
<http://www.ethereal.com/docs/man-pages/tcpdump.8.html>?