Wireshark-users: Re: [Wireshark-users] Capture filters for wlan
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: G Capps <vkcapps@xxxxxxxxx>
Date: Sat, 3 Jul 2010 10:19:09 -0600
Thank you, Joke!

I had wondered about using offsets but hadn't quite figured out how to
do it.  I just tried what you suggested and it worked great.


>> I've been looking at the offsets and I've figured this out:
>> ra  b0:14:1e:30:74:a8
>> ta  00:16:b6:bc:d6:7b
>> da  00:16:b6:bc:d6:7b
>>
>> ra capture filter
>> wlan[4:4]==0xb0141e30
>>
>> wlan[4:4*]
>> * 4 seems to be the max
>>
>> ta
>> wlan[10:4]==0x0016b6bc
>>
>> da
>> wlan[16:4]==0x0016b6bc
>>
>> wlan[4:4]==0xb0141e30 or wlan[10:4]==0x0016b6bc
>> wlan[4:4]==0xb0141e30 and wlan[10:4]==0x0016b6bc
>>
>> My best
>> Joke