Wireshark · Ethereal-users: Re: [Ethereal-users] How to filter IPX

["Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>]

Hi,

try "eth.type>=0x0800"
as the display filter.

it should filter so that you ONLY see ethernetII packets.

If you only want to see packet with llc, use
"llc" as the display filter.

If you only want to see packets that are either EthernetII or contains an
llc layer, use
"(eth.type>=0x0800) or llc"

I hope this helps.


>Hello Joe,
>
>I get only a "Unexpected end of filter string" error.
>Probably you have defined a filter with this name on you machine.
>
>The problem is that I want to see only 802.2 and Ethernet II packets. I
don't
>need to see the 802.3 packet, because I know they are ok.