How do I filter on a range of ipv6 addresses, for example an ipv6 filter similar to ipv4 192.168.0.0/16? I would like to filter on ipv6 addresses on my lan fe80::/10 but cannot seem to find the correct syntax. Thanks! asked 30 Dec '10, 20:32  debianuser edited 02 Jan '11, 18:24  Gerald Combs ♦♦ |
3 Answers:
Are you trying to apply masks to IPv6 addresses in capture filters or display filters? For capture filters you'd use As Sake said, you can't apply masks to IPv6 addresses in display filters (not yet, at least) but you can use comparison operators: answered 02 Jan '11, 18:24 Gerald Combs ♦♦ |
i just tried a few combinations myself, and am also stumped (using both WS 1.2 and 1.4). I thought that I had used this in past, but I'm not sure now. Even looking through this Sharkfest '10 presentation, I can't find any clues there (lots of mentions of networks with masks, though no screenshots showing a relevant display filter). link text Maybe no one has implemented this yet. If you don't get any positive responses, file a feature request bug. answered 30 Dec '10, 21:36  martyvis |
I just looked at the sourcecode and there is indeed no functionality implemented yet to accept a prefix-length in a display filter. I'm looking into it right now, but as I have not done much with the display filter engine, I'm not sure I will come up with a solution shortly. Could you file an enhancement request on https://bugzilla.wireshark.org to be sure it won't get lost? answered 31 Dec '10, 00:59  SYN-bit ♦♦ Done - bug 5538 (31 Dec '10, 04:55) martyvis |
Love that one, Gerald!