Ethereal-users: Re: [ethereal-users] filtres

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: gharris@xxxxxxxxxxxx
Date: 5 Jun 2000 07:07:13 -0700
On Fri, 02 June 2000, noel tirolle wrote:
> how make a filtre for only ip frames ?

(Replying via my Web mail service from a friend's house, so I don't have immediate access to Ethereal or its source.)

By "filter for only IP frames" do you mean either a capture filter that captures only IP packets - no ARP, no OSI, no Netware, no Appletalk, no random proprietary protocols, etc. - or a display filter that shows only IP packets in a capture?

If so, then I think just "ip" should work, although for a display filter, and perhaps for a capture filter, that will get only IPv4 packets, not IPv6 packets.  A display filter to show both IPv4 and IPv6 would be "ip || ipv6", I think, but I'm not sure whether any versions of libpcap (other than the current one from tcpdump.org) support IPv6.