Wireshark: Filter by Multicast in GUI

前端 未结 5 689
情歌与酒
情歌与酒 2021-02-01 21:10

Using the Wireshark \"Filter\" field in the Wireshark GUI, I would like to filter capture results so that only multicast packets are shown.

I\'ve seen this post but tha

5条回答
  •  时光取名叫无心
    2021-02-01 21:43

    (eth.dst[0]&1) 
    

    will filter both multicast and broadcast. So, from this exclude broadcast. It will be like

    (eth.dst[0]&1) && !eth.dst==ff:ff:ff:ff:ff:ff 
    

提交回复
热议问题