Introduction to Ethereal (v.0.9.9), The Open Source Network-Protocol Analyzer

27
Ethereal
...Extracting data: display filters...
More Ethereal display-filter examples:
• Display only packets from host A (ip address 1.2.3.4) to
host B (ip address 5.6.7.8):
ip.src == A && ip.dst == B
or
ip.src eq 1.2.3.4 && ip.dst eq 5.6.7.8
•Display only CIFS_NEGOTIATE replies with CAP_UNIX
bit set:
smb.server_cap.unix == 1