[Winpcap-users] V4.0A - filter syntax

Marcel van Lieshout marcel at hmcs.nl
Mon May 29 21:24:56 GMT 2006


Hello,

Two filters in V4.0A:

"(ether dst 01:02:03:04:05:06) or (ether broadcast)"

"ether dst 01:02:03:04:05:06 or ether broadcast"

Both compile succesfully, but only the second one gives the expected result

Probably simple but not (yet) to me...

Marcel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20060529/d08b9e75/attachment.htm


More information about the Winpcap-users mailing list