Wireshark-users: [Wireshark-users] Capture filter for ethernet range
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Andrew Schweitzer <a.schweitzer.grps@xxxxxxxxx>
Date: Tue, 07 Nov 2006 18:26:40 -0500
I have an enthernet range I want to sniff (00:80:44:00:00:00 - 00:80:44:ff:ff:ff).
The following filter is legal, and sort of looks right, but only seems to capture packets where the packet's ethernet *destination* is the specified range. 

(ether[0:4]>=0x00804400 and ether[0:4]<=0x008044ff)

Any ideas?

Thanks