Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: [Wireshark-users] Capture filter for ethernet range

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: Andrew Schweitzer <a.schweitzer.grps@xxxxxxxxx>
Date: Tue, 07 Nov 2006 18:26:40 -0500

I have an enthernet range I want to sniff (00:80:44:00:00:00 -00:80:44:ff:ff:ff).

The following filter is legal, and sort of looks right, but only seemsto capture packets where the packet's ethernet *destination* is thespecified range.


(ether[0:4]>=0x00804400 and ether[0:4]<=0x008044ff)

Any ideas?

Thanks

Follow-Ups:
- Re: [Wireshark-users] Capture filter for ethernet range
  - From: Jack Jackson

Prev by Date: Re: [Wireshark-users] Please help decode DCERPC packets between W2K, a DC, and an Exchange Server
Next by Date: Re: [Wireshark-users] Capture filter for ethernet range
Previous by thread: [Wireshark-users] Are there plans to provide WPA+PSK decryption methods?
Next by thread: Re: [Wireshark-users] Capture filter for ethernet range
Index(es):
- Date
- Thread