On Thu, Mar 27, 2003 at 12:07:00PM -0800, Guy Harris wrote: > You'd have to check for multicast IP addresses.
...which you can do with the filter "ip multicast". Note, BTW, that the correct way to test for link-layer multicast packets is "ether multicast" or "fddi multicast" or "tr multicast" or "wlan multicast" or "link multicast" (they're all equivalent - it doesn't check whether the word you use before "multicast" is right for the network type). - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]
