Ethereal-users: Re: [ethereal-users] filtres

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: gharris@xxxxxxxxxxxx
Date: 5 Jun 2000 07:07:13 -0700
On Fri, 02 June 2000, noel tirolle wrote:
> how make a filtre for only ip frames ?

(Replying via my Web mail service from a friend's house, so I don't have immediate access to Ethereal or its source.)

By "filter for only IP frames" do you mean either a capture filter that captures only IP packets - no ARP, no OSI, no Netware, no Appletalk, no random proprietary protocols, etc. - or a display filter that shows only IP packets in a capture?

If so, then I think just "ip" should work, although for a display filter, and perhaps for a capture filter, that will get only IPv4 packets, not IPv6 packets.  A display filter to show both IPv4 and IPv6 would be "ip || ipv6", I think, but I'm not sure whether any versions of libpcap (other than the current one from tcpdump.org) support IPv6.