I want to create a capture filter based on a partial MAC address. For example, I want to capture all traffic from devices with MAC address containing 00:0C:22. I have been using "ether host xx:xx:xx:xx:xx:xx" but this syntax requires a full MAC address-- it does not work with a partial MAC. What is the correct filter to use in this case? Thanks!
