Wireshark mailing list archives
Re: Capture filter with multiple VLANs
From: Todd Adamson <tadamson () routers com>
Date: Mon, 5 Aug 2019 11:02:39 -0500
Ah. And that is why we ask the questions. I didn't think of moving farther down the stack for the capture filters. Thanks to everyone who sent the idea.
Todd On 8/1/2019 8:52 AM, Maynard, Chris via Wireshark-users wrote:
How about a capture filter such as this? "vlan and not (ether[14:2]&0x0fff = 20 or ether[14:2]&0x0fff = 30)" - Chris See also: https://ask.wireshark.org/question/3877/vlan-filter/-----Original Message----- From: Wireshark-users [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Todd Adamson Sent: Wednesday, July 31, 2019 6:41 PM To: Wireshark-users () wireshark org Subject: [Wireshark-users] Capture filter with multiple VLANs Is it possible to create a capture filter to deal with multiple vlans? What I would like to do is: not (vlan 20 or vlan 30) or not vlan 20 and not vlan 30 So far, from what I've read, only the first vlan element is used in the filter. Ideas? Thanks. Todd
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Re: Capture filter with multiple VLANs Maynard, Chris via Wireshark-users (Aug 01)
- Re: Capture filter with multiple VLANs Todd Adamson (Aug 05)