Ethereal-users: [Ethereal-users] Capturing a range of MAC addresses

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: <menxit@xxxxxxxxx>
Date: Wed, 11 Feb 2004 07:20:18 -0800 (PST)
Hi,
I’m looking for a capture filter to capture a range of
MAC addresses.

I have been able to capture packets from one MAC
address of one NIC by using the following capture
filter:    ether host 01:23:45:67:89:AB  

But I’m looking to capture all packets coming from
NICs which MAC address that start with 01:23:45

I have tried     ether src[0:3]=01:23:45     or    
ether src[0:3] 01:23:45     or      ether host
src[0:3] 01:23:45       but all returns a parse error

I’m using ethereal 0.10.0, tcpdump 3.8, libpcap 0.8

Any ideas as to what I should use or what i'm doing
wrong.

Thank you in advance
-Mike


__________________________________
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html