Wireshark-users: Re: [Wireshark-users] filter to capture ospf pacets?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: LEGO <luis.ontanon@xxxxxxxxx>
Date: Thu, 2 Nov 2006 17:50:23 +0000
cat /etc/protos


On 11/2/06, stan <stanb@xxxxxxxxx> wrote:

On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote:
> On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote:
> >
> > How can I set up a filter to capture all OSPF packets seen on a given
> > interface?
>
> OSPF is using it's own protocol on top of IP, you can use the
> capture filter "proto 89" to capture only ospf packets.
>
That worked perefectly, and allowed me to quickly diagnose a long standing
problem!

Now, I really ought to learn something from this exercise. What does teh
proto keyword mean, and where can I look up values for it?

--
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users




--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan