Ethereal-users: Re: [Ethereal-users] Capture filter for Cisco VTP packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 23 Jul 2004 00:02:44 -0700
On Thu, Jul 22, 2004 at 11:30:44AM -0400, Thompson, Patrick wrote:
> I would like to setup a capture filter for Cisco VTP packets only. What
> would the capture filter string look like?

A filter like

	ether[12:2] <= 1500 && ether[14:4] == 0xaaaa0300 &&
	    ether[18:4] == 0x000C2003

might do it.