Dear I try to capture packet from customer which has byte end by 1. my capture has two part : packet send and recevied. The first part like this :
( ether dst 00:00:00:00:00:01 and pppoes and ip[19:1]&0x0f=0x01 )
This capture filter works well The second part
( ether src 00:00:00:00:00:01 and pppoes and ip[15:1]&0x0f=0x01 )
This capture filter works well also But when combine two of them : the filter bar is red ( seems that wrong syntax filter )
( ether dst 00:00:00:00:00:01 and pppoes and ip[19:1]&0x0f=0x01 ) or ( ether src 00:00:00:00:00:01 and pppoes and ip[15:1]&0x0f=0x01 )
Please help me to fix the capture filter syntax Thank so much