 | 1 | initial version |
(This is really a libpcap question, but....)
The packets are always VLAN encapsulated.
That means that all filters must be of the form "vlan XXX"; for example, "vlan ip" to find IP packets, "vlan arp" to find ARP packets, etc..
| | 2 | No.2 Revision |
(This is really a libpcap question, but....)
The packets are always VLAN encapsulated.
That means that all filters must be of the form "vlan and XXX"; for example, "vlan and ip" to find IP packets, "vlan and arp" to find ARP packets, etc..
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
