RE: [Ethereal-users] Newbie Needs Help, Please

["Guy Harris" <gharris@xxxxxxxxx>]

Jim Bonaiuto said:
> I would like to see all TCP/IP traffic going to and from our main router
> to our three satellite routers.  The IP address for the main router is
> 10.1.1.1, the three satellite routers are: 10.2.1.1, 10.3.1.1 and
> 10.4.1.1.

    ((host 10.1.1.1 and 10.2.1.1) or (host 10.1.1.1 and 10.3.1.1) or (host
10.1.1.1 and 10.4.1.1)) and tcp

should work as a capture filter.  (It should capture *only* TCP traffic
between 10.1.1.1 and 10.{2,3,4}.1.1.)