Ethereal-users: Re: [Ethereal-users] Capturing a range of MAC addresses

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx>
Date: Wed, 11 Feb 2004 23:55:33 +0100
menxit@xxxxxxxxx wrote:

Thanks Marco, works great.  I would never have known
to use hex since ‘ether 01:23:45:67:89:ab’ does not
use hex.

Well, 'ab' sure looks like hex to me :-). But I see what you mean.

How come ether[10:4]=0x01234567 does not work?  It
doesn’t give me a parser error but it does not capture
any packets.

Because the source MAC address starts at offset 6, not 10? Try 'ether[6:4] = 0x01234567'.

--

		Groeten,

			Marco.