Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] "Cisco format" MAC addresses in display filters?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 31 Jan 2007 17:42:25 -0800

On Tue, Jan 30, 2007 at 02:12:28PM -0800, Stephen Fisher wrote:

> How hard would it be to allow the display filter to accept "Cisco 
> format" MAC addresses (xxxx.xxxx.xxxx) and still match the usual 
> format (xx:xx:xx:xx:xx:xx)?  Where would I change this?

I have committed SVN revision 20660 that allows this format of MAC 
addresses to be specified and match the traditional format MAC addresses 
seen in Wireshark.

For the record, I had to modify hex_str_to_bytes() in strutil.c because 
the FT_ETHER type uses the same functions that FT_BYTES uses:

  http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=20660


Steve


  • Prev by Date: Re: [Wireshark-dev] SVN doesn't compile under MacOS X
  • Next by Date: Re: [Wireshark-dev] Multiple pdus atop TCP -- a lie in README.developer?
  • Previous by thread: Re: [Wireshark-dev] SVN doesn't compile under MacOS X
  • Next by thread: Re: [Wireshark-dev] Multiple pdus atop TCP -- a lie in README.developer?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation