Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] ipv6 multicast packet in tshark-1.0.0

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: dikshie <dikshie@xxxxxxxxxxxxxx>
Date: Thu, 03 Apr 2008 03:40:16 +0900

Hi,
with tshark-0.99.7 i can capture all ipv6 multicast packet:
sfc-monitor# tshark -i em2 -R 'ipv6.dst[0:1]==ff' -z io,stat,1
===================================================================
IO Statistics
Interval: 1.000 secs
Column #0:
                |   Column #0
Time            |frames|  bytes
000.000-001.000      58     20644
===================================================================


but with tshark-1.0.0 the syntax become wrong:
sfc-monitor# ./tshark -i em2 -R 'ipv6.dst[0:1]==ff' -z io,stat,1
tshark: Protocol ("ff") cannot appear on right-hand side of comparison.
sfc-monitor#


any suggestions?


regards,

-dikshie-

  • Prev by Date: Re: [Wireshark-users] Unknown AVP problem
  • Next by Date: [Wireshark-users] Capture traffic in monitor mode - only broadcasts
  • Previous by thread: Re: [Wireshark-users] Can any one please tell me where can i get Wireshark installable rpm for Redhat Linux EL3
  • Next by thread: [Wireshark-users] Capture traffic in monitor mode - only broadcasts
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation