NEWBIE the mac address consists out of 6 hex values. But I want to only filter is on the first 3 hex values (brand info) Is there some kind of wild card I can use, example: ether.src == 00:20:4a:8f:3d:b1 00:20:4a:8f:3d:b1 = Pronet_8f:3d:b1 asked 30 Jan '13, 11:52  mear1628 |
2 Answers:
You can use : answered 30 Jan '13, 12:30  SYN-bit ♦♦ |
You could try this:
That will also match your vendor addresses, however also aa:bb:cc:00:20:4a or aa:bb:00:20:4a:xx, however such a false positive seems to be rather unlikely. Regards answered 30 Jan '13, 11:59  Kurt Knochner ♦ |
Thanks works like a charm!
@mear1628
I've converted your "answer" to a comment as that's how this site works, please read the FAQ for details.
If an answer solves your issue please accept it for the benefit of other users by clicking the checkmark icon next to the answer.