[Ethereal-users] Filter Syntax for tethereal

[ddstock@xxxxxxx]

Greetings,

I have difficulty with tethereal filter syntax.  When using tethereal, if I specify primitive 'host' followed by IP address, tethereal behaves correctly and captures packets only to/from that host.   However if I specify additional command line options for tethereal, then the filter syntax is failed and therefore the capture failed.  Example :

 

tethereal host 192.168.1.100

 

The above works fine.   However the following variation with additional options fails :

 

tethereal host 192.168.32.131 -a filesize:10000 duration:15 -w ethcap1

tethereal: Unable to parse capture filter string (syntax error).

 

I've tried several variations including attempting to specify the -f option operator with no success.  Can anyone offer syntax usage examples that allows filter by host via tethereal to work when used in conjunction with additional options?

 

Thanks!

DD