Re: [ethereal-users] filtres

[gharris@xxxxxxxxxxxx]

On Fri, 02 June 2000, noel tirolle wrote:
> how make a filtre for only ip frames ?

(Replying via my Web mail service from a friend's house, so I don't have immediate access to Ethereal or its source.)

By "filter for only IP frames" do you mean either a capture filter that captures only IP packets - no ARP, no OSI, no Netware, no Appletalk, no random proprietary protocols, etc. - or a display filter that shows only IP packets in a capture?

If so, then I think just "ip" should work, although for a display filter, and perhaps for a capture filter, that will get only IPv4 packets, not IPv6 packets.  A display filter to show both IPv4 and IPv6 would be "ip || ipv6", I think, but I'm not sure whether any versions of libpcap (other than the current one from tcpdump.org) support IPv6.