> > # tethereal -a filesize:50000 -f "host 192.168.0.5 and port 6346" -w phasar.log > Is there a way to exclude specific hosts and and types of traffic? Most of my log consists of SMB, domain requests along with continuations of file downloads. -- Best regards, Patrick Kirk Mobile: 07876 560 646