Ethereal-users: Re: [Ethereal-users] How can I ignore "STP" packets?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 12 Jun 2004 01:38:41 -0700
On Fri, Jun 11, 2004 at 08:13:00AM -0400, Kozlarek, Robert wrote:
> I've noticed that with the latest Linksys firmware the router
> constantly broadcasts "Spanning Tree" (STP) packets.  Is there any way
> that I can tell Ethereal to ignore those specific packets?

With sufficiently recent versions of libpcap (0.6 or later) and WinPcap
(3.0 and later, and possibly 2.3), a capture filter of "not stp" should
work.

That will only eliminate STP packets; there might be other traffic on
your network that you'd like to filter out.

If you're only interested in IP traffic (i.e., not even ARP traffic),
Joerg Mayer's suggestion of "ip" will work.  It will also work with
older versions of libpcap/WinPcap.