Hi Guy, > a filter that controls what packets are read, so that the > packets that pass the filter are contiguously, and only those > packets are printed if you do "File/Print", but so that you > can't change the filter and see packets that didn't pass the > command-line filter In my case, i did a long-term scan on AIX (iptrace) with a range of about 50 remote machines to find certain conditions that breaks a connection. When such a break happens, i just wanted to be able to load a subset of the huge generated file (performace simply sucks, if a 100MB trace file is loaded). So it's basically a way to make a broad scan and just pretend to ethereal it was a more narrowed down one (once you know how to narrow it down :) ) Cheers, Jochen
Powered by MHonArc 2.6.10