Wireshark · Ethereal-users: Re: [Ethereal-users] IP ranges on capture filters?

[Andrew Hood <ajhood@xxxxxxxxx>]

King, John (Greg) (LMIT-HOU) wrote:
> Is there a way to tell tethereal to capture data for an ip range say
> 192.168.1.50-100 without having to create a huge filter with many
> entries? Currently I am covering the capture range like this:
> 
> Tethereal -I eth1 -b 200 -a filesize:20000 -w 'SAMPLEa' -f "ip and (host
> 192.168.1.50 or host 192.168.1.51 ...)"

: echo 192.168.1.50-192.168.1.100 | aggregate -irange
192.168.1.50/31
192.168.1.52/30
192.168.1.56/29
192.168.1.64/27
192.168.1.96/30
192.168.1.100/32

so:

tethereal -i eth1 -b 200 -a filesize:20000 -w 'SAMPLEa' -f "ip and (net
192.168.1.50/31 or net 192.168.1.52/30 or net 192.168.1.56/29 or net
192.168.1.64/27 or net 192.168.1.96/30 or net 192.168.1.100/32)"

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who