Re: Capture filter with multiple VLANs

["Maynard, Chris via Wireshark-users" <wireshark-users () wireshark org>]

How about a capture filter such as this?

"vlan and not (ether[14:2]&0x0fff = 20 or ether[14:2]&0x0fff = 30)"

- Chris
See also: https://ask.wireshark.org/question/3877/vlan-filter/


> -----Original Message-----
> From: Wireshark-users [mailto:wireshark-users-bounces () wireshark org] On
> Behalf Of Todd Adamson
> Sent: Wednesday, July 31, 2019 6:41 PM
> To: Wireshark-users () wireshark org
> Subject: [Wireshark-users] Capture filter with multiple VLANs
>
> Is it possible to create a capture filter to deal with multiple vlans?  What I
> would like to do is:
>
> not (vlan 20 or vlan 30)
> or
> not vlan 20 and not vlan 30
>
> So far, from what I've read, only the first vlan element is used in the filter.
>
> Ideas?
>
> Thanks.
>
> Todd











CONFIDENTIALITY NOTICE: This message is the property of International Game Technology PLC and/or its subsidiaries and 
may contain proprietary, confidential or trade secret information. This message is intended solely for the use of the 
addressee. If you are not the intended recipient and have received this message in error, please delete this message 
from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is 
strictly prohibited.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe