Wireshark: Filter by Multicast in GUI

Question

Using the Wireshark \"Filter\" field in the Wireshark GUI, I would like to filter capture results so that only multicast packets are shown.

I\'ve seen this post but tha

Answer 1

Just use this (eth.dst[0] & 1) . Multicast traffic is recognized by the least significant bit of the most significant byte of the MAC address. If 1, multicast, if 0, not.