Ethereal-users: [Ethereal-users] Capturing a range of MAC addresses

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: <menxit@xxxxxxxxx>
Date: Wed, 11 Feb 2004 07:20:18 -0800 (PST)
Hi,
I�m looking for a capture filter to capture a range of
MAC addresses.

I have been able to capture packets from one MAC
address of one NIC by using the following capture
filter:    ether host 01:23:45:67:89:AB  

But I�m looking to capture all packets coming from
NICs which MAC address that start with 01:23:45

I have tried     ether src[0:3]=01:23:45     or    
ether src[0:3] 01:23:45     or      ether host
src[0:3] 01:23:45       but all returns a parse error

I�m using ethereal 0.10.0, tcpdump 3.8, libpcap 0.8

Any ideas as to what I should use or what i'm doing
wrong.

Thank you in advance
-Mike


__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html