Try these capture filters
1. "not ether broadcast"
2. "not ( arp or ip proto 2 ) "
Other capture filter protocols can be discerned from
http://www.ethereal.com/docs/man-pages/tcpdump.8.html
Martin
Martin Visser ,CISSP
Network and Security Consultant
Consulting & Integration
Technology Solutions Group - HP Services
3 Richardson Place
North Ryde, Sydney NSW 2113, Australia
Phone: +61-2-9022-1670
Mobile: +61-411-254-513
Fax: +61-2-9022-1800
E-mail: martin.visserAThp.com
This email (including any attachments) is intended only for the use of
the individual or entity named above and may contain information that is
confidential, proprietary or privileged. If you are not the intended
recipient, please notify HP immediately by return email and then delete
the email, destroy any printed copy and do not disclose or use the
information in it.
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of
> Fendie BS /Yahoo
> Sent: Wednesday, 16 February 2005 2:32 PM
> To: 'Ethereal user support'
> Subject: [Ethereal-users] How to block specific packet
>
> Dear All,
>
> I would like to know how to block the specific packets, so
> they will not be captured by Ethereal. Would anybody let me
> know what filter expression that I can use to :
> 1. Block the broadcast packets
> 2. Block a specific protocol, such as IGMP or ARP
>
> Thanks a lot in advance.
>
> Rgds,
> Fendie
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>