Re: TCPDUMP filter for multicast

[Guy Harris <guy () alum mit edu>]

(I'm on tcpdump-workers, so there's no need to send mail to me *and*
tcpdump-workers; if you have a question, it's better to ask
tcpdump-workers than to ask only me.)

On Sat, Jun 19, 2004 at 10:07:17PM -0400, Ernest L. Williams Jr. wrote:
> Could you tell me a tcpdump filter that only gives multicast?
> 'ether[0] & 1 != 0' gives both multicasts and broadcasts; I only want
> multicasts.

How about

        multicast and not broadcast
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.