Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] about aodv and udp?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Wed, 16 Apr 2003 23:15:46 +1000
If you really want the ICMP packets to be filtered even those that
encapsulates IP/UDP packets:

Use:

(ip.proto==0x11) && (!icmp)


----- Original Message -----
From: "Johnny Choque"
Sent: Wednesday, April 16, 2003 10:46 PM
Subject: [Ethereal-users] about aodv and udp?


> Hello, I am using ethereal 0.9.9 with libpcap 0.7.1, when I try to
> filter UDP packet using the following filter:
>
> ip.proto==0x11 or another same
>
> I get as result both UDP and ICMP packets. Why are not ICMP packets
> filtered?
>
> In the other hand, when I capture AODV traffic based-on IPv4 and I
> disable AODV6 dissector, the ethereal show AODV packets as UDP packets
> and, of course, the UDP data is not dissected. What happen with AODV
> dissector (not AODV6)?
>
> Johnny
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users