On Jul 27, 2004, at 5:55 PM, Devesh Pujari wrote:
I have set filter as “ether proto 0x8888” to capture packets for particular Ethernet type. But I want to set the filter only for incoming and Ethernet type 0x8888 so that my program does not capture packets which I send.
I tried “src ether proto 0x8888”
"src" and "dst" apply only to fields where there are both "source" and "destination" flavors of the field, such as MAC and IP addresses. They do not apply to fields such as the Ethernet type for which there is only one flavor - Ethernet headers don't have source and destination type fields.
I tried “inbound and ether proto 0x8888”
"Inbound" works only when the link-layer header given to libpcap has an inbound/outbound flag; there's no such flag in the link-layer header supplied for Ethernet packets.
Currently, you'll have to find the MAC address for the interface on which you're capturing and use that in a filter. At some point there will probably be an API to specify that packets being sent by the machine shouldn't be captured.
================================================================= This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/
To unsubscribe use mailto: [EMAIL PROTECTED] =================================================================
