Ethereal-users: Re: [Ethereal-users] How to filter IPX

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>
Date: Mon, 18 Feb 2002 23:21:39 +1100
Hi,

try "eth.type>=0x0800"
as the display filter.

it should filter so that you ONLY see ethernetII packets.

If you only want to see packet with llc, use
"llc" as the display filter.

If you only want to see packets that are either EthernetII or contains an
llc layer, use
"(eth.type>=0x0800) or llc"

I hope this helps.


>Hello Joe,
>
>I get only a "Unexpected end of filter string" error.
>Probably you have defined a filter with this name on you machine.
>
>The problem is that I want to see only 802.2 and Ethernet II packets. I
don't
>need to see the 802.3 packet, because I know they are ok.