Re: Basic question about Wireshark

["Frank Walter" <francwalter () gmx net>]

> Are you talking about capture filter?
> Unfortunately the capture filter syntax is different from display filter
> syntax.
> The capture filter
>   not ether dest ff:ff:ff:ff:ff:ff
> should exclude broadcast packets.

Oh no. This gives me a clear:

Invalid capture filter: "not ether dest ff:ff:ff:ff:ff:ff"!

Like I said before: when I choose it from the list, it works. It is just and easy: "not broadcast" :-)  So this is not 
the problem.
The "problem" is, that the display filter doesn't work. E.g. like this:

!(eth.dst == ff:ff:ff:ff:ff:ff)

when I am in Monitor mode. This doesn't filter the ff:ff:ff:ff:ff:ff packets at all. Neither does this: 
!(eth==ff:ff:ff:ff:ff:ff).
And I don't know either how to filter all those packets away with another SSID. I just want my packets with SSID=mywifi 
and want to filter SSID=otherwifi completely out.


Kind Regards,

franc



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe