Wireshark · Ethereal-users: Re: [Ethereal-users] newbie question

Ethereal-users: Re: [Ethereal-users] newbie question - capture filtering IPX

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>

Date: Wed, 2 Apr 2003 20:56:51 -0800

On Wed, Apr 02, 2003 at 10:25:40PM +0200, COLIN Stï¿½phane wrote:
> Try setting filter like :
> 
> ether proto ipx

...although that one will only handle what I think is called
"Ethernet_II" IPX, rather than "Ethernet_802.3", "Ethernet_802.2", or
"Ethernet_SNAP" IPX:

	http://www.nbd.dk/faq/nvfaq-l.htm

Libpcap 0.7.1 and later support just "ipx" as a filter, which, on
Ethernet, checks for all four of those; unfortunately, the WinPcap 2.3
Matt Hoyle is using is based on libpcap 0.6.2, which doesn't support
"ipx" - WinPcap 3.0 beta is based on a snapshot of the current CVS
version of libpcap, which *does* support "ipx".

Follow-Ups:
- Re: [Ethereal-users] newbie question - capture filtering IPX
  - From: Matt Hoyle

References:
- [Ethereal-users] newbie question - capture filtering IPX
  - From: Matt Hoyle
- Re: [Ethereal-users] newbie question - capture filtering IPX
  - From: COLIN Stéphane

Prev by Date: Re: [Ethereal-users] filtering input from a capture file
Next by Date: [Ethereal-users] (no subject)
Previous by thread: Re: [Ethereal-users] newbie question - capture filtering IPX
Next by thread: Re: [Ethereal-users] newbie question - capture filtering IPX
Index(es):
- Date
- Thread