Re: multicast & icmp packet printing

[Guy Harris <guy () netapp com>]

On Thu, Mar 27, 2003 at 12:07:00PM -0800, Guy Harris wrote:
> You'd have to check for multicast IP addresses.

...which you can do with the filter "ip multicast".

Note, BTW, that the correct way to test for link-layer multicast packets
is "ether multicast" or "fddi multicast" or "tr multicast" or "wlan
multicast" or "link multicast" (they're all equivalent - it doesn't
check whether the word you use before "multicast" is right for the
network type).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe