Hannes Gredler wrote:
Dan Joumaa wrote:
Hello,
I am trying to capture all ethernet packets with the source host's
first 3 octets being 00, 09, and bf. It was suggested that I used
this filter: "ether[0] == 0x00 && ether[1] == 0x09 && ether[2] ==
0xbf." Wh
Hannes Gredler wrote:
Dan Joumaa wrote:
Hello,
I am trying to capture all ethernet packets with the source host's
first 3 octets being 00, 09, and bf. It was suggested that I used
this filter: "ether[0] == 0x00 && ether[1] == 0x09 && ether[2] ==
0xbf." Wh
Alexander Dupuy wrote:
The ethernet frame has dest address first, then source. You want ether[6]
through ether[8] for source address filtering.
@alex
Ah, I see.
The funny thing is, when I try this in tcpdump, it works, but in my app
I still don't get any packets.
I've scanned through
Hello,
I am trying to capture all ethernet packets with the source host's first
3 octets being 00, 09, and bf. It was suggested that I used this filter:
"ether[0] == 0x00 && ether[1] == 0x09 && ether[2] == 0xbf." When packets
are sent that should match, nothing comes through. When I remove th
