Wireshark-users: Re: [Wireshark-users] filter to capture ospf pacets?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: stan <stanb@xxxxxxxxx>
Date: Thu, 2 Nov 2006 12:31:18 -0500
On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote:
> On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote:
> > 
> > How can I set up a filter to capture all OSPF packets seen on a given
> > interface?
> 
> OSPF is using it's own protocol on top of IP, you can use the 
> capture filter "proto 89" to capture only ospf packets. 
> 
That worked perefectly, and allowed me to quickly diagnose a long standing
problem!

Now, I really ought to learn something from this exercise. What does teh
proto keyword mean, and where can I look up values for it?

-- 
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)