Re: Sniffing for multicast traffic

[Ronald Nutter <rnutter () HNTB com>]

Thanks.  I need to try more with the wireshark help.  I don't seem to always find what I am looking for.

Ron


-----Original Message-----
From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of DePriest, 
Jason R.
Sent: Thursday, May 20, 2010 10:18 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Sniffing for multicast traffic

> From Wireshark help for capture filters

ether|ip broadcast|multicast
This primitive allows you to filter on either Ethernet or IP
broadcasts or multicasts.

So
tshark ether multicast or ip multicast
might work.

-Jason

On Thu, May 20, 2010 at 9:08 AM, Ronald Nutter <> wrote:
> I am getting ready to make a change to the network at my company and need to
> verify what traffic is going over multicast.
>
> I have been able to see existing multicast traffic by using a capture filter
> net 224.0.0.0/4.  How can I see any multicast traffic that
>
> Is on the network and isn't using the normal multicast range ?  Havent
> worked with multicast much, so just trying to be on the careful side.
>
>
>
> Ron
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
This e-mail and any files transmitted with it are confidential 
and are intended solely for the use of the individual or entity 
to whom they are addressed. 

If you are NOT the intended recipient or the person responsible for 
delivering the e-mail to the intended recipient, 
be advised that you have received this e-mail in error and that any use, 
dissemination, forwarding, printing or copying this e-mail is strictly prohibited.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe