Wireshark · Ethereal-users: Re: [Ethereal-users] Filters and airodump captures

[Guy Harris <gharris@xxxxxxxxx>]

tcharsle@xxxxxxxx wrote:
> Does anyone have problems with Filters not working right with 'airodump' 
> capture files?
>
> Any == filter ends up returning no packets, any ! filter doesn't remove 
> unwanted packets.

The Ethereal filter code - and, in fact, the vast majority of the code 
in Ethereal - doesn't know what type of capture file is being used, so 
this is unlikely to have anything to do with the fact that it's a 
particular type of capture file.

Do you have an example of an == filter that returns no packets and of a 
packet it should have matched, or of a ! filter that doesn't remove 
unwanted packets and of one of the packets it should have removed, so we 
can see what the problem might be?