["Keith French" <keithfrench@xxxxxxxxxxxxx>]

Yes that works fine. Thanks very much.

--------------------------------------------------
From: "Wes" <wes_r@xxxxxxxxx>
Sent: Wednesday, October 21, 2009 1:06 PM
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] Display Filter L3 Broadcasts

> Oops. Sorry, misunderstood the question. Looks like Martin has the answer 
> though.
>
> Wes
>
> --- On Wed, 10/21/09, Keith French <keithfrench@xxxxxxxxxxxxx> wrote:
>
> > From: Keith French <keithfrench@xxxxxxxxxxxxx>
> > Subject: Re: [Wireshark-users] Display Filter L3 Broadcasts
> > To: "Community support list for Wireshark" 
> > <wireshark-users@xxxxxxxxxxxxx>
> > Date: Wednesday, October 21, 2009, 4:25 AM
> > No that will only display all packets
> > with  ip addresses in those subnets, I
> > only want to see the Layer 3 broadcasts (x.x.x.255) from
> > those subnets.
> >
> >
> > --------------------------------------------------
> > From: "Wes" <wes_r@xxxxxxxxx>
> > Sent: Tuesday, October 20, 2009 11:03 PM
> > To: "Community support list for Wireshark" 
> > <wireshark-users@xxxxxxxxxxxxx>
> > Subject: Re: [Wireshark-users] Display Filter L3
> > Broadcasts
> >
> > > Try:
> > >
> > > ip.addr == 192.168.1.0/24
> > >
> > > or whatever mask size you like.
> > >
> > > Wes
> > >
> > > --- On Tue, 10/20/09, Keith French <keithfrench@xxxxxxxxxxxxx>
> > wrote:
> > >
> > >> From: Keith French <keithfrench@xxxxxxxxxxxxx>
> > >> Subject: [Wireshark-users] Display Filter L3
> > Broadcasts
> > >> To: "Wireshark-Users" <wireshark-users@xxxxxxxxxxxxx>
> > >> Date: Tuesday, October 20, 2009, 5:45 PM
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >> I want to use a display
> > >> filter to show the Layer 3
> > >> broadcasts for a range of subnets. The sort of
> > thing I am
> > >> after is to show all
> > >> broadcasts for these subnets (assuming a 24 bit
> > >> mask):-
> > >>
> > >> 192.168.0.255
> > >> 192.168.1.255
> > >> 192.168.2.255
> > >> etc
> > >>
> > >> So what I am really after
> > >> is some sort of wild card
> > >> like:-
> > >>
> > >> ip.addr eq
> > >> x.x.x.255
> > >>
> > >> I am not interested in the
> > >> all subnet broadcast
> > >> address of 255.255.255.255.
> > >>
> > >> How can I filter on these
> > >> subnet
> > >> broadcasts?
> > >>
> > >> Keith French.
> > >>
> > >>
> > >>
> > >>
> > >> -----Inline Attachment Follows-----
> > >>
> > >>
> > ___________________________________________________________________________
> > >> Sent via:    Wireshark-users mailing
> > list <wireshark-users@xxxxxxxxxxxxx>
> > >> Archives:    http://www.wireshark.org/lists/wireshark-users
> > >> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> > >>
> > >>    mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
> > >
> > >
> > >
> > >
> > ___________________________________________________________________________
> > > Sent via:    Wireshark-users mailing list
> > <wireshark-users@xxxxxxxxxxxxx>
> > > Archives:    http://www.wireshark.org/lists/wireshark-users
> > > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> > >
> > > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
> >
> >
> >
> > >
> > > No virus found in this incoming message.
> > > Checked by AVG - www.avg.com
> > > Version: 8.5.423 / Virus Database: 270.14.24/2449 -
> > Release Date: 10/20/09
> > > 18:42:00
> > >
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >
> >    mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe



> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.423 / Virus Database: 270.14.24/2449 - Release Date: 10/20/09 
> 18:42:00