Re: [Ethereal-users] help with filter syntax

[Guy Harris <guy@xxxxxxxxxx>]

> You would probably want to capture port 161 (snmp) and port 162 (snmp-trap).
> So using a filter string something like:
> port 161 or port 162

Or

	port snmp or port snmp-trap

$ ypcat services | egrep '16[12]'
snmp-trap       162/udp         snmptrap        # SNMP trap (event) messages
snmp            161/udp                         # Simple Network Mgmt Protocol