<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hi and sorry for begging for help.<BR>
i've found no clue how to convert my wireshark-filter string to winpcap filter.<BR>
Here's what's my filter looks like:<BR>
<BR>
(eth.src==00:0e:0c:76:86:5e)&&((frame.protocols=="eth:llc:netbios:data")||(frame.protocols=="eth:llc:netbios:dcerpc))<BR>
<BR>
<BR>
what i've currently managed is "eth src 00:0e:0c:76:86:5e" but i've no idea how to convert the other string.<BR>
<BR>
Many thanks for any help/reply!!!<BR> <br /><hr />Windows Live: <a href='http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_3:092010' target='_new'>Friends get your Flickr, Yelp, and Digg updates when they e-mail you.</a></body>
</html>