Wireshark · Ethereal-users: Re: [Ethereal-users] tethereal question with display filters

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

try this instead:
tethereal -r <infile> -R "http contains www.nortel.com" -w outputfile.trc
Where you have to replace <infile> by the capture file you have.

On Thu, 12 Jan 2006, Summerville, Raymond wrote:

> Folks,
>
> trying to filter a captured trace but I cannot seem to get tethereal to
> accept the filteres I have defined. Here
> is the command I'm using:
>
> >tethereal -r filtename -R filterfile -w outputfile.trc
>
> Where my filterfile contains the following:
>
> http contains www.nortel.com
>
> I also want to capture the complete flow.
>
> So the first question is tethereal doe snot seem to be taking the
> display filterfile, is the command above correct ?
>
> Thanks,
> Ray Summerville
>
>