tcpdump mailing list archives
Re: TCPDUMP filter for multicast
From: Guy Harris <guy () alum mit edu>
Date: Sat, 19 Jun 2004 19:24:52 -0700
(I'm on tcpdump-workers, so there's no need to send mail to me *and* tcpdump-workers; if you have a question, it's better to ask tcpdump-workers than to ask only me.) On Sat, Jun 19, 2004 at 10:07:17PM -0400, Ernest L. Williams Jr. wrote:
Could you tell me a tcpdump filter that only gives multicast? 'ether[0] & 1 != 0' gives both multicasts and broadcasts; I only want multicasts.
How about multicast and not broadcast - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- Re: TCPDUMP filter for multicast Guy Harris (Jun 19)
- Message not available
- Re: TCPDUMP filter for multicast Guy Harris (Jun 20)
- Re: TCPDUMP filter for multicast Ernest L. Williams Jr. (Jun 20)
- Re: TCPDUMP filter for multicast Guy Harris (Jun 20)
- Message not available