Re: capture filter with multiple vlans

[Sake Blok <sake () euronet nl>]

On 4 mrt 2010, at 19:03, Gerald Combs wrote:

> Guy Harris wrote:
> > On Mar 3, 2010, at 8:24 AM, Filonenko Alexander-AAF013 wrote:
> > > Are there any tricks to handle more than one vlan?
> >
> > Unfortunately, none that I know of.
>
> Would something like
>
>    vlan and ( ether[14] & 0xfff == 101 or ether[14] & 0xfff == 201 )
>
> work?

Yes, I was testing something like that too and it works:

vlan and (ether[14:2]&0x0fff = 102 or ether[14:2]&0x0fff = 103)

Cheers,


Sake

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe