osmocom
/
wireshark
11
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

dfilter: Fix "private_ethernet" macro 

The macro expression is invalid because of the range used and looks
a bit wrong.

Use a simpler expression that should match the intended meaning,
filtering for unicast addresses with the U/L bit equal to 1.
This commit is contained in:
João Valverde 2022-07-13 15:28:32 +01:00 committed by A Wireshark GitLab Utility
parent 06cd84a6e9
commit d594743e4b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
resources/share/wireshark/dfilter_macros
View File

@ -2,5 +2,5 @@
# This file is the macro file shipped with Wireshark.
# For your personal macros, use the same file in your profile dir.
"private_ipv4","$1 == 192.168.0.0/16 or $1 == 172.16.0.0/12 or $1 == 10.0.0.0/8"
"private_ethernet","($1[0-0] & 02) == 0x02 or ($1[0-0] & 06) or ($1[0-0] & 0A) or ($1[0-0] & 06)"
"private_ethernet","$1[0] & 0x0F == 2"
"private_ipv6", "ipv6 && $1 == fc00::/7"