Configuring Ethernet filters

When talking about Ethernet filters, we refer to Layer-2 filters that are MAC address-based filters. In this recipe we will refer to these filters and what we can do with them.

Getting ready

The basic Layer 2 filters are:

  • ether host <Ethernet host>: To get the Ethernet address
  • ether dst <Ethernet host>: To get the Ethernet destination address
  • ether src <Ethernet host>: To get the Ethernet source address
  • ether broadcast: To capture all Ethernet broadcast packets
  • ether multicast: To capture all Ethernet multicast packets
  • ether proto <protocol>: To filter only the protocol type indicated in the protocol identifier
  • vlan <vlan_id>: To pass only packets from a specific VLAN that is indicated in the identifier field

For negating a ...

Get Network Analysis Using Wireshark Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial