ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] "Cisco format" MAC addresses in display filters?

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 31 Jan 2007 17:42:25 -0800
On Tue, Jan 30, 2007 at 02:12:28PM -0800, Stephen Fisher wrote:

> How hard would it be to allow the display filter to accept "Cisco 
> format" MAC addresses (xxxx.xxxx.xxxx) and still match the usual 
> format (xx:xx:xx:xx:xx:xx)?  Where would I change this?

I have committed SVN revision 20660 that allows this format of MAC 
addresses to be specified and match the traditional format MAC addresses 
seen in Wireshark.

For the record, I had to modify hex_str_to_bytes() in strutil.c because 
the FT_ETHER type uses the same functions that FT_BYTES uses:

  http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=20660


Steve