Wireshark mailing list archives

Re: Capture filters for wlan


From: G Capps <vkcapps () gmail com>
Date: Sat, 3 Jul 2010 10:19:09 -0600

Thank you, Joke!

I had wondered about using offsets but hadn't quite figured out how to
do it.  I just tried what you suggested and it worked great.


I've been looking at the offsets and I've figured this out:
ra  b0:14:1e:30:74:a8
ta  00:16:b6:bc:d6:7b
da  00:16:b6:bc:d6:7b

ra capture filter
wlan[4:4]==0xb0141e30

wlan[4:4*]
* 4 seems to be the max

ta
wlan[10:4]==0x0016b6bc

da
wlan[16:4]==0x0016b6bc

wlan[4:4]==0xb0141e30 or wlan[10:4]==0x0016b6bc
wlan[4:4]==0xb0141e30 and wlan[10:4]==0x0016b6bc

My best
Joke
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: