On Thu, Mar 03, 2011 at 09:00:43AM EST, Anand Sivaram wrote: > Tcpdump and Ethereal are very similar in terms of capture filters. > They both use libpcap. I believe they call it ‘wireshark’ these days.. cj