title

Capture filter pppoes does not work as expected - Ask Wireshark

description

Dear I try to capture packet from customer which has byte end by 1. my capture has two part : packet send and recevied. The first part like this : ( ether dst 00:00:00:00:00:01 and pppoes and ip[19:1]&0x0f=0x01 ) This capture filter works well The second part ( ether src 00:00:00:00:00:01 and pppoes and ip[15:1]&0x0f=0x01 ) This capture filter works well also But when combine two of them : the filter bar is red ( seems that wrong syntax filter ) ( ether dst 00:00:00:00:00:01 and pppoes and ip[19:1]&0x0f=0x01 ) or ( ether src 00:00:00:00:00:01 and pppoes and ip[15:1]&0x0f=0x01 ) Please help me to fix the capture filter syntax Thank so much

Content-Type

text/html; charset=UTF-8

X-UA-Compatible

IE=EDGE

keywords

,Askbot,forum,community

alternate

https://ask.wireshark.org/feeds/rss/

canonical

https://ask.wireshark.org/question/24957/capture-filter-pppoes-does-not-work-as-expected/

shortcut icon

/upfiles/favicon-ask_ei6YseF.ico

stylesheet

/m/default/media/style/style.css?v=1

stylesheet

/m/Wireshark/media/style/extra.css?v=1