Hello, i don't really get the syntax on the capture filter, how would this translate into capturing filter? Thanks. wlan.fc.type_subtype eq 4 and wlan.addr == ff:ff:ff:ff:ff:ff asked 23 Sep '14, 19:08 pato-llaguno |
One Answer:
4 is a probe request, and wlan.addr matches all possible MAC addresses, so that would be
although not all versions of libpcap support "wlan addrN". answered 02 Oct '14, 11:48 Guy Harris ♦♦ |