Home page logo
/

pauldotcom logo PaulDotCom mailing list archives

Re: Etherape filtering is not working
From: Michael Miller <mike.mikemiller () gmail com>
Date: Mon, 16 Aug 2010 12:27:21 -0700

Did you look at the FAQ and see the following?

Is it possible to see just traffic within my network? Is it possible
to see just traffic to/from the internet?
You can indeed filter traffic. Have a look at the filter entry in
preferences->capture->filter
Suppose your network address starts with 213.227
If you only want to see traffic within your network, then the proper syntax is
ip and src net 213.227 and dst net 213.227
Or if you want to see connections to/from outside your network then
try something like
ip and ((not src net 213.227) and dst net 213.227) or (src net 213.227
and (not dst net 213.227))
Filtering is done by libpcap. For the full filter syntax, see the
pcap-filter man page or the tcpdump web site http://www.tcpdump.org/

-mmiller

On Fri, Aug 6, 2010 at 6:43 AM, Quentin Ducas <quentin.h4c () gmail com> wrote:
Etherape filtering is not working?


..or is not well configured.
(Almost certain that it is the latter)

I want to monitor just one host in my network.
Computer 1 has Etherape installed, OS=Debian Lenny, IP 192.168.55.160
Computer 2 is the host I want to monitor, OS=WinXP, IP 192.168.55.12
The network:
Modem -> router (SweexLW055) -> Hub (3Com 3C16170)
                          -> Comp. 1
                          -> Comp. 2

Capture Filter is set as : src net 192.168.55.12 dst net 192.168.55.12

But still etherape shows the internet-connections from and to computer 1
(192.168.55.160).
How is it possible to let etherape [i] only [/i] show the connections from
and to the 192.168.55.12 (comp 2)

Thanks in advance,
Quentin

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]