Re: [tcpdump-workers] capturing packets with identical MAC for source and destination

2013-09-03 Thread Lentes, Bernd
Gisle wrote: > > "Lentes, Bernd" wrote: > > > I'd like to capture all packets which have the same > MAC-address for sender and destination. > > But i don't know the MAC which is causing these messages. > So i have to use an universal filter. > > I tried to use "tcpdump 'ether[8:6] = ether[14:6]'"

Re: [tcpdump-workers] capturing packets with identical MAC for source and destination

2013-09-03 Thread Gisle Vanem
"Lentes, Bernd" wrote: I'd like to capture all packets which have the same MAC-address for sender and destination. But i don't know the MAC which is causing these messages. So i have to use an universal filter. I tried to use "tcpdump 'ether[8:6] = ether[14:6]'". Beginning with byte 8 is the