(I'm on tcpdump-workers, so there's no need to send mail to me *and* tcpdump-workers; if you have a question, it's better to ask tcpdump-workers than to ask only me.)
On Sat, Jun 19, 2004 at 10:07:17PM -0400, Ernest L. Williams Jr. wrote: > Could you tell me a tcpdump filter that only gives multicast? > 'ether[0] & 1 != 0' gives both multicasts and broadcasts; I only want > multicasts. How about multicast and not broadcast - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.