Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: [Ethereal-users] TCP Filter problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ron Apuzzo <admin@xxxxxxx>
Date: Fri, 27 May 2005 09:13:20 -0500 (CDT)

I downloaded the latest ethereal version 0.10.11 today. I can see all TCP and other traffic fine. Then I tried to put in a very simple filter "tcp port 23" and tried to telnet from host A(ethereal host) to host B. The result is only traffic from host A->B(23) was captured but not from B(23)->A. Promiscuous mode was turned off.

When I tried other TCP ports, same result! it never captured incoming traffic to the host running ethereal. Again with no filter I would see traffic from both directions which makes me believe that this is the problem of ethereal filtering. This is 100% reproducable.

Any hints or suggestions that I could try? I just want to capture traffic from A:xxxx <-> B:fixed_port but I want to capture both ways.

Thanks in advance for any inputs,
-Ron