Ethereal过滤规则语法

捕获过滤器(Filtering while capturing)

ethereal使用libpcap filter language 过滤语言，在tcpdump的man page中有解释，但是比较难理解。

一个捕获过滤器 规则类似于 下面的表达式





[not] primitive [and|or [not] primitive ...

primitive 原始的, 远古的, 粗糙的, 简单的-Ethereal capture filter syntax filtering rules (Filtering while capturing) ethereal libpcap filter language filter language used in the tcpdump' s man page has an explanation, but more difficult to understand. A capture filter rules similar to the following expression [not] primitive [and | or [not] primitive ... primitive primitive, ancient, rough, simple