Ethereal-users: Re: [Ethereal-users] capture filter, PPPoE

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 26 Nov 2002 11:07:08 -0800
On Tue, Nov 26, 2002 at 09:24:08AM +0100, Farkas Máté wrote:
> Can anyone help me with capture filters when capturing PPPoE connection?
> Is that possible at all?

Only if the interface on which you're capturing looks like a PPP
interface rather than an Ethernet interface.  libpcap, when capturing on
an Ethernet interface, compiles filter expressions under the assumption
that the expression is referring to Ethernet packets rather than
encapsulated PPP packets (for example, any IP-header filter expressions
assume that the packet has an Ethernet type of 0x0800 and that the IP
header follows the Ethernet header).