Wireshark · Wireshark-users: Re: [Wireshark-users] Basic question about Wireshark

["Frank Walter" <francwalter@xxxxxxx>]

> Are you talking about capture filter?
> Unfortunately the capture filter syntax is different from display filter
> syntax.
> The capture filter
>   not ether dest ff:ff:ff:ff:ff:ff
> should exclude broadcast packets.
> 

Oh no. This gives me a clear:

Invalid capture filter: "not ether dest ff:ff:ff:ff:ff:ff"!

Like I said before: when I choose it from the list, it works. It is just and easy: "not broadcast" :-)  So this is not the problem.
The "problem" is, that the display filter doesn't work. E.g. like this:

!(eth.dst == ff:ff:ff:ff:ff:ff)

when I am in Monitor mode. This doesn't filter the ff:ff:ff:ff:ff:ff packets at all. Neither does this: !(eth==ff:ff:ff:ff:ff:ff).
And I don't know either how to filter all those packets away with another SSID. I just want my packets with SSID=mywifi and want to filter SSID=otherwifi completely out.


Kind Regards,

franc