The filter expression is a logical expression, you do not list the attributes you want to use you create an expression that matches the packets you are interested in. In the case you are exposing the expression will be "arp or tcp" since you want to filter out both "types" of packets . There's a doc explaining filter expressions at http://www.ethereal.com/docs/man-pages/ethereal-filter.4.html Luis
Powered by MHonArc 2.6.10