> -----Original Message-----
> From: Guy Harris [mailto:guy@xxxxxxxxxxxx]
> Sent: Thursday, November 20, 2003 10:31 AM
> To: Ow Mun Heng
> Cc: ethereal-users@xxxxxxxxxxxx
> Subject: Re: [Ethereal-users] Filter out LLC protocal packets
>
>
>
> On Nov 19, 2003, at 6:19 PM, Ow Mun Heng wrote:
>
> > I"m getting a lot of LLC (logical Link Control) packets which is
> > just too verbose for me, I would like to get rid of it via filter.
>
> What do you mean by "LLC packets"?
<REPLY>
Sorry.. I think it's LLC Protocol
>
> If you mean packets using 802.2 LLC, then, on most networks, either
>
> 1) no packets are 802.2 LLC packets (e.g., non-IEEE 802
> networks)
>
> or
>
> 2) most packets are 802.2 LLC packets (e.g., IEEE 802
> networks *other*
> than Ethernet)
>
> so I'll assume you're either
>
> 1) running on Ethernet (in which case almost all, if
> not all, IP
> packets, for example, aren't 802.2 LLC packets)
>
> or
>
> 2) running on some other 802 network (Token Ring,
> 802.11), or FDDI,
> and you only want to see "management" packets, not data packets.
>
<REPLY>
I'm running on a 802.11. I do not want to see LLC protocol packets.
My current "capture" filter is this
!arp and !port 53 and !ip of ethereal host and !llc
^^^^ something
like this
I want all other packets to be logged. Arp and DNS request packets are just
'information' which is not needed. I know DNS and Arp are working fine.