Ethereal-users: Rer: [Ethereal-users] Capture filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 21 Mar 2003 18:49:28 +0100
Pascal Chauffour wrote:

>
>Thanks for the informations.
>
>Based on the observations found in the previous mails you did reference,
>yes we use source routing and I have found packets with IP headers located
>at different offsets, the Ethereal GUI seems to decode every packets
>without problem so this is almost probably a still existing WinPcap
>limitation.
>
>For information, I did install the last binary packages of Ethereal 0.9.11
>and winPcap 3.0 BETA.
>


The Windump man-page (http://windump.polito.it/docs/manual.htm) says:

"Filter expressions on fields other than those that manipulate Token Ring headers will not correctly handle source-routed Token Ring packets."