Ethereal-users: Re: [Ethereal-users] Encapsulation filter - inner and outer packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 28 Nov 2001 00:21:40 -0800
On Wed, Nov 28, 2001 at 09:16:21AM +0100, Damien Routier wrote:
> I would like to know if there is a simple mean to differenciate fileds
> of the inner and outer packets for ip encapsulation.
> 
> For example in a 4in6 packet I can check the v4 addresses and v6
> addresses and I can check that ipv6.nxh == #ipv4 but in the case of ipv6
> in ipv6 I cannot check the order of the addresses (I use tethereal and i
> don't want this verification to be interactive ie)
> 
> I have searched the archives for this simple question but I didn't find
> any info for this topic

That's because there isn't a way to do it.  The display filter code
doesn't know the difference between different IPv4 or IPv6 addresses, if
a frame has multiple source or destination IPv4 or IPv6 addresses.