Ethereal-users: [Ethereal-users] display filter for multicast

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Lars Scheffmann <scheffmann@xxxxxxxxxxxxxxxxx>
Date: Thu, 21 Jul 2005 14:31:53 +0200 (DDT)
I would like to make a display filter so I can extract all multicast and broadcast packets from a captured file. 

It is possible to do this in capture filter with "ether multicast".

I know the "substring operator" but this operate on a byte, not on a bit.

Does it already exists, or can you help me?




Best regards

Security co-ordinator
Lars Scheffmann,                      E-Mail: scheffmann@xxxxxxxxxxxxxxxxx
Syddansk Universitet, IT-service      Direct: +45 6550 2867
Campusvej 55,  DK-5230  Odense M      Mobile: +45 6011 2867
Denmark                               Fax:    +45 6550 2860