Wireshark-users: Re: [Wireshark-users] capture filter with multiple vlans
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Thu, 04 Mar 2010 10:03:56 -0800
Guy Harris wrote:
> On Mar 3, 2010, at 8:24 AM, Filonenko Alexander-AAF013 wrote:
>> Are there any tricks to handle more than one vlan?
> 
> Unfortunately, none that I know of.

Would something like

    vlan and ( ether[14] & 0xfff == 101 or ether[14] & 0xfff == 201 )

work?



-- 
Join us for Sharkfest ’10! · Wireshark® Developer and User Conference
Stanford University, June 14-17 · http://www.cacetech.com/sharkfest.10/