Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-03 Thread Jaap Keuter
Hi, See http://www.tcpdump.org/tcpdump_man.html Thanx, Jaap On Thu, 2 Nov 2006, stan wrote: > On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote: > > On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote: > > > > > > How can I set up a filter to capture all OSPF packets seen on a given >

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread Small, James
Stan, I believe you have it, but just to re-iterate: The most common capture is usually TCP/IP over Ethernet. So if we look at a capture of TCP/IP traffic over Ethernet, a typical Frame looks like this: Ethernet Frame which "carries" a Network Protocol (such as IP) IP Datagram which "carries" a T

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread stan
On Thu, Nov 02, 2006 at 05:50:23PM +, LEGO wrote: > cat /etc/protos > > Ah, /etc/services brother. Thanks, I did not even know that was there. -- Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie) ___ Wiresha

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread Mike Savory
On Nov 2, 2006, at 9:50 AM, LEGO wrote: > cat /etc/protos >> Now, I really ought to learn something from this exercise. What >> does the >> proto keyword mean, and where can I look up values for it? Try cat /etc/protocols This works on my Mac. For a more extensive list of what you can fil

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread Guy Harris
LEGO wrote: > cat /etc/protos Or, rather, /etc/protocols. ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread Guy Harris
stan wrote: > Now, I really ought to learn something from this exercise. What does teh > proto keyword mean, and where can I look up values for it? See the tcpdump man page, if you're running on a UN*X system - or, if "man tcpdump" at the command line doesn't work, see http://www.tcpdum

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread LEGO
cat /etc/protos On 11/2/06, stan <[EMAIL PROTECTED]> wrote: > On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote: > > On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote: > > > > > > How can I set up a filter to capture all OSPF packets seen on a given > > > interface? > > > > OSPF is usi

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread stan
On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote: > On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote: > > > > How can I set up a filter to capture all OSPF packets seen on a given > > interface? > > OSPF is using it's own protocol on top of IP, you can use the > capture filter "prot

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread stan
On Thu, Nov 02, 2006 at 04:07:25PM +0100, Sake Blok wrote: > On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote: > > > > How can I set up a filter to capture all OSPF packets seen on a given > > interface? > > OSPF is using it's own protocol on top of IP, you can use the > capture filter "prot

Re: [Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread Sake Blok
On Thu, Nov 02, 2006 at 09:44:36AM -0500, stan wrote: > > How can I set up a filter to capture all OSPF packets seen on a given > interface? OSPF is using it's own protocol on top of IP, you can use the capture filter "proto 89" to capture only ospf packets. Hope this helps, Cheers, Sake __

[Wireshark-users] filter to capture ospf pacets?

2006-11-02 Thread stan
Sorry for the beginner level question, but i am just trying to understand how to use filters. How can I set up a filter to capture all OSPF packets seen on a given interface? -- Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)