Ethereal-users: Re: [Ethereal-users] getting MAC addresses from ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "M.C. van den Bovenkamp" <marco@xxxxxxxxxxxxxxxxxxx>
Date: Sat, 26 Jan 2002 02:25:34 +0100
Rakesh Arora wrote:

>       Thanks for helping me out. I have a couple more
> questions. I have written a read filter for tethereal
> which looks like this:
>     eth.src[0:3]!=00:02:2d and eth.src[0:3]!=00:50:8b
> 
> Now how do I write the corresponding capture filter? I
> have read the man pages but am still unable to write
> one.

'!(ether[0:2] = 0x0002 and ether[2] = 0x2d) and !(ether[0:2] = 0x0050
and ether[2] = 0x8b)' I think. But double check my boolean logic; it's
rusty and it's almost 2:30 AM here :-).

		Regards,

			Marco.