Ethereal-users: Re: [Ethereal-users] newbie question - capture filtering IPX

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 2 Apr 2003 20:56:51 -0800
On Wed, Apr 02, 2003 at 10:25:40PM +0200, COLIN Stéphane wrote:
> Try setting filter like :
> 
> ether proto ipx

...although that one will only handle what I think is called
"Ethernet_II" IPX, rather than "Ethernet_802.3", "Ethernet_802.2", or
"Ethernet_SNAP" IPX:

	http://www.nbd.dk/faq/nvfaq-l.htm

Libpcap 0.7.1 and later support just "ipx" as a filter, which, on
Ethernet, checks for all four of those; unfortunately, the WinPcap 2.3
Matt Hoyle is using is based on libpcap 0.6.2, which doesn't support
"ipx" - WinPcap 3.0 beta is based on a snapshot of the current CVS
version of libpcap, which *does* support "ipx".