Wireshark · Ethereal-users: [Ethereal-users] Capture filters

Ethereal-users: [Ethereal-users] Capture filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Rancier, Jeff" <Jeff.Rancier@xxxxxxxxxx>

Date: Fri, 29 Apr 2005 12:51:36 -0400

Can someone explain the following filter (from the Wiki):

icmp[icmptype]==icmp-echo and ip[2:2]==92 and icmp[8:4]==0xAAAAAAAA

Follow-Ups:
- Re: [Ethereal-users] Capture filters
  - From: MH

Prev by Date: Re: [Ethereal-users] Ethereal on W2K
Next by Date: RE: [Ethereal-users] Personal Configuration File location
Previous by thread: Re: [Ethereal-users] Personal configuration file repository
Next by thread: Re: [Ethereal-users] Capture filters
Index(es):
- Date
- Thread

Riverbed Cascade Pilot: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed AirPcap: Complete Visibility of Your Wireless Networks; Multi-Channel, Aggregated Analysis; Portable and Versatile; Easy to Setup and Easy to Use; Ready to Power Your Application

$Riverbed TurboCap: Full-Speed GbE Capture; Port Aggregation; Pass-thru Mode; Aggregating Tap; Full-Speed GbE Injection; Exported Interfaces; TurboCap API Developer\'s Pack$