Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Tao Zhou <moonese@xxxxxxxxx>
Date: Thu, 27 Aug 2009 23:40:30 +0800

"pppoes && port 80" just works, Thanks!

On Thu, Aug 27, 2009 at 3:04 AM, Sake Blok <sake@xxxxxxxxxx> wrote:
On Wed, Aug 26, 2009 at 09:42:08AM -0700, Gerald Combs wrote:
> Tao Zhou wrote:
> >
> > But today I found that the laptop NIC card has not obtained a valid IP
> > address, as it uses DHCP; while STB got an public network IP address
> > through PPPoE.
>
> Are you trying to apply a capture filter to PPPoE traffic? If so, you
> might want to try something like "pppoes && port 80". According to the
> tcpdump man page you need to use it in order for your filter to use the
> proper offsets.

And if that does not work, you might want to post a binary capture of
the http traffic (when no capture filter is used) so that we can have a
look why the filter "port 80" might not have worked...

> > So I guess maybe the root cause is that without an IP address for
> > laptop, the 'Capture Filter' will make it could not capture any packets;
> > while leaving it empty will get all packets in the hub successfully.

Nope, you don't need (and ofter even do not want) an IP address on the
capture interface.

Cheers,
   Sake
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

  • References:
    • Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
      • From: Tao Zhou
    • Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
      • From: Martin Visser
    • Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
      • From: Tao Zhou
    • Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
      • From: Gerald Combs
    • Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
      • From: Sake Blok
  • Prev by Date: Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
  • Next by Date: Re: [Wireshark-users] Nano Second Time format
  • Previous by thread: Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
  • Next by thread: Re: [Wireshark-users] Capture Filter not work for hub, seems like a bug?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation