Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] filter for snmp doesn't work (also shows ICMP???)

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: leonardo.lagos@xxxxxxxxxxxxxxxxxxxxxxx
Date: Wed, 05 Mar 2008 11:07:36 -0600

Hi,

I have a capture file where I have added the following filter:

ip.proto==0x11 and udp.port==162

This filter works, and show my SNMP traps, but also shows an ICMP 
packet.. However, ip.proto for ICMP is 0x01, not 0x11....

I can attach screenshot if someone wants to have a better look...

Regards,

Leo

  • Follow-Ups:
    • Re: [Wireshark-users] filter for snmp doesn't work (also shows ICMP???)
      • From: Sake Blok
    • Re: [Wireshark-users] filter for snmp doesn't work (also shows ICMP???)
      • From: Jim Young
  • Prev by Date: Re: [Wireshark-users] Fwd: Remote manager for wireshark dump?
  • Next by Date: Re: [Wireshark-users] filter for snmp doesn't work (also shows ICMP???)
  • Previous by thread: Re: [Wireshark-users] (no subject)
  • Next by thread: Re: [Wireshark-users] filter for snmp doesn't work (also shows ICMP???)
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation