Wireshark · Wireshark-users: Re: [Wireshark-users] Sniffing for multicast traffic

["DePriest, Jason R." <jrdepriest@xxxxxxxxx>]

>From Wireshark help for capture filters

ether|ip broadcast|multicast
This primitive allows you to filter on either Ethernet or IP
broadcasts or multicasts.

So
tshark ether multicast or ip multicast
might work.

-Jason

On Thu, May 20, 2010 at 9:08 AM, Ronald Nutter <> wrote:
> I am getting ready to make a change to the network at my company and need to
> verify what traffic is going over multicast.
>
> I have been able to see existing multicast traffic by using a capture filter
> net 224.0.0.0/4.  How can I see any multicast traffic that
>
> Is on the network and isn’t using the normal multicast range ?  Havent
> worked with multicast much, so just trying to be on the careful side.
>
>
>
> Ron