Wireshark · Wireshark-users: Re: [Wireshark-users] gratuitous ARP

[j.snelders@xxxxxxxxxx]

Hi Ronnie,

What about this one:
(arp.src.proto_ipv4 == 192.168.1.111) && (arp.dst.proto_ipv4 == 192.168.1.111)

Regards
Joan


On Thu, 21 May 2009 12:59:11 +1000 ronnie sahlberg wrote:

>You can unfortunately not filter for gratuitous arp in wireshark since it
>would require a filter that would look like :
>   arp.src.proto_ipv4 == arp.dst.proto_ipv4
>
>But you can not compare two fields that they are identical in this way.

>regards
>ronnie sahlberg