Wireshark-users: Re: [Wireshark-users] filter to capture ospf pacets?

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Fri, 3 Nov 2006 11:47:01 +0100 (CET)

Hi,

See http://www.tcpdump.org/tcpdump_man.html

Thanx,
Jaap

On Thu, 2 Nov 2006, stan wrote:

> On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote:
> > On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote:
> > >
> > > How can I set up a filter to capture all OSPF packets seen on a given
> > > interface?
> >
> > OSPF is using it's own protocol on top of IP, you can use the
> > capture filter "proto 89" to capture only ospf packets.
> >
> That worked perefectly, and allowed me to quickly diagnose a long standing
> problem!
>
> Now, I really ought to learn something from this exercise. What does teh
> proto keyword mean, and where can I look up values for it?
>