How do I find information about the MAC address, it is not my MAC Address. I tried ether host xx.xx.xx.xx.xx.xx as a filter it just stayed pink, not green. I have searched for how to find information about the MAC Address, all I get is IP Address to MAC Address.
Thank you,
Vicky71
The display filter is eth.dst==xx.xx.xx.xx.xx.xx, not ether host. If you are running 3.4.x, you should be able to drag-n-drop as a filter. Spanning tree utilizes different multicast destination MAC addresses.
"ehter host" is a capture filter. To filter the displayed packets use a display filter. For Ethernet address use "eth.addr == xx:xx:xx:xx:xx:xx".
See also: https://gitlab.com/wireshark/wireshar... and https://www.wireshark.org/docs/man-pa...
Via the menu Statistics / Endpoints you can easily see the MAC addresses present in the file and use the 'apply as filter' in the context menu.
When using a capture filter in the 'Capture Options' menu, the syntax is: "ether host xx:xx:xx:xx:xx:xx" (colon instead of dot).
Asked: 2021-07-06 21:34:15 +0000
Seen: 851 times
Last updated: Jul 07 '21
