Re: Sniffing for multicast traffic

["DePriest, Jason R." <jrdepriest () gmail com>]

> From Wireshark help for capture filters

ether|ip broadcast|multicast
This primitive allows you to filter on either Ethernet or IP
broadcasts or multicasts.

So
tshark ether multicast or ip multicast
might work.

-Jason

On Thu, May 20, 2010 at 9:08 AM, Ronald Nutter <> wrote:
> I am getting ready to make a change to the network at my company and need to
> verify what traffic is going over multicast.
>
> I have been able to see existing multicast traffic by using a capture filter
> net 224.0.0.0/4.  How can I see any multicast traffic that
>
> Is on the network and isn’t using the normal multicast range ?  Havent
> worked with multicast much, so just trying to be on the careful side.
>
>
>
> Ron
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe