[Winpcap-users] Question about Filter

[Zhiyuan Cheng]

Hi, I want to configure winpcap to only capture the packets between two machines, 
with IP addresses, for example, 192.168.1.1 and 192.168.1.2

Winpcap is installed on machine 192.168.1.2, the filter string I used is
"tcp and ip src host 192.168.1.1 || tcp and ip dst host 192.168.1.1"

But it seems that I only got packets sent from 192.168.1.2 to 192.168.1.1, that is, 
only the outcoming packets. The part of the filter string before "||" seems to be ignored. 
Is there anything wrong with this filter string, and how can I change it? Thanks!

Zhiyuan


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20070208/a935264c/attachment.htm