when i write in the filter i get an error, this is what i write: "ether host 'macaddress'". I want to filter it so it only displays packets from the host Mac-address. And when i starts to write 'ether' it doesn't come up white anything i can use. How can a make it capture the MAC address.

asked 19 Sep '12, 00:20

Munken's gravatar image

Munken
1112
accept rate: 100%


eth.src==MACaddress

link

answered 19 Sep '12, 00:29

Munken's gravatar image

Munken
1112
accept rate: 100%

1

This is a display filter for a MAC address. The other syntax "ether host MAC" is a capture filter.

(19 Sep '12, 01:22) Jasper ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×330
×106
×24

Asked: 19 Sep '12, 00:20

Seen: 9,431 times

Last updated: 19 Sep '12, 01:22

powered by OSQA