Wireshark mailing list archives

Re: capture filter with multiple vlans


From: Filonenko Alexander-AAF013 <Alex.Filonenko () motorola com>
Date: Tue, 9 Mar 2010 12:24:59 -0500

On 4 mrt 2010, at 19:03, Gerald Combs wrote:

Guy Harris wrote:
On Mar 3, 2010, at 8:24 AM, Filonenko Alexander-AAF013 wrote:
Are there any tricks to handle more than one vlan?

Unfortunately, none that I know of.

Would something like

   vlan and ( ether[14] & 0xfff == 101 or ether[14] & 0xfff == 201 )

work?

Yes, I was testing something like that too and it works:

vlan and (ether[14:2]&0x0fff = 102 or ether[14:2]&0x0fff = 103)

Cheers,


Sake

Works great! Thank you
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: