Wireshark · Ethereal-users: [Ethereal-users] define a capture filter

Ethereal-users: [Ethereal-users] define a capture filter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "bacman" <bacman@xxxxxxxx>

Date: Thu, 20 May 2004 12:02:53 +0800

Hi,

I want to define a capture filter like below:

frame[54:4] == 50:41:53:55 or

ether[54:4]=ABCD

ether[54:4]==ABCD

which are want to retrieve a few bytes in Ethernet package. However, they all don't work.

Who can tell me how to define?

Thanks

BACman