Ethereal-users: [Ethereal-users] display filter for multicast

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Lars Scheffmann <scheffmann@xxxxxxxxxxxxxxxxx>
Date: Thu, 21 Jul 2005 14:31:53 +0200 (DDT)
I would like to make a display filter so I can extract all multicast and broadcast packets from a captured file. 

It is possible to do this in capture filter with "ether multicast".

I know the "substring operator" but this operate on a byte, not on a bit.

Does it already exists, or can you help me?




Best regards

Security co-ordinator
Lars Scheffmann,                      E-Mail: scheffmann@xxxxxxxxxxxxxxxxx
Syddansk Universitet, IT-service      Direct: +45 6550 2867
Campusvej 55,  DK-5230  Odense M      Mobile: +45 6011 2867
Denmark                               Fax:    +45 6550 2860