Thanks Marco, works great. I would never have known to use hex since ‘ether 01:23:45:67:89:ab’ does not use hex.
Well, 'ab' sure looks like hex to me :-). But I see what you mean.
How come ether[10:4]=0x01234567 does not work? It doesn’t give me a parser error but it does not capture any packets.
Because the source MAC address starts at offset 6, not 10? Try 'ether[6:4] = 0x01234567'.
--
Groeten,
Marco.
_______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
