Since TCP and UDP are mutually exclusive, I think your filter would need
to look like this:

(udp or tcp) and ether host XX:XX:XX:XX:XX:XX


Thank you,

David Barnish
Senior Software Engineer
Research And Development
[EMAIL PROTECTED]
-----Original Message-----
From: Selcuk Cevher [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 08, 2003 2:33 AM
To: [EMAIL PROTECTED]
Subject: [WinPcap-users] about a filtering expression syntax...?


hi,

i only want to see the packets which satisfy the following rule :

all TCP and UDP packets over IPv4 that their ethernet destination
adrress is 
XX:XX:XX:XX:XX:XX

thank you

_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail



==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================


================================================================= This is the WinPcap 
users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use
 mailto: [EMAIL PROTECTED]
=================================================================

Reply via email to