[Winpcap-users] V4.0A - filter syntax

Marcel van Lieshout marcel at hmcs.nl
Mon May 29 21:24:56 GMT 2006


Two filters in V4.0A:

"(ether dst 01:02:03:04:05:06) or (ether broadcast)"

"ether dst 01:02:03:04:05:06 or ether broadcast"

Both compile succesfully, but only the second one gives the expected result

Probably simple but not (yet) to me...

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20060529/d08b9e75/attachment.htm

More information about the Winpcap-users mailing list