If I provide the following capture filter:
port 25
in order to capture an SMTP transaction, I see only packets with destination port 25 -- I.e. I see the the client's outgoing packets only. However, if I capture with NO filter specified, I see all packets.
I also tried
src port 25 || dst port 25
but the results were the same.
This is with Ethereal versions 0.10.10 and 0.10.9, and with WinPCap 3.0 and 3.1Beta4.
Am I missing something? This used to work just fine.
-- James Garrison Athens Group, Inc. mailto:jhg@xxxxxxxxxxxxxxx 5608 Parkcrest Dr http://www.athensgroup.com Austin, TX 78731 PGP: RSA=0x92E90A3B DH/DSS=0x498D331C (512) 345-0600 x150
Powered by MHonArc 2.6.10