Ethereal-dev: Re: [ethereal-dev] packet capture from switches and other RMON devices

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: guy@xxxxxxxxxx (Guy Harris)
Date: Wed, 12 May 1999 14:47:57 -0700 (PDT)
> It _is_ a very simple filtering mechanism and pretty much kept me to
> filtering on the datalink-layer info (MAC addresses).

It could also filter on other fields *if* there aren't any packets with
variable-length headers (Token Ring with source routing, IP or TCP with
options) - I'm not sure that the filter-expression parser in "libpcap"
handles those either.