CODEWITHSUNDEEP
network-programmingtcpwiresharkipv6ipv4
user1670032
user1670032

Reputation: 770

Wireshark Capture Filter - IPv4 and IPv6

How would I specify a Wireshark capture filter to only capture ICMP (both for IPv4 and IPv6) and ARP and neighbour discovery protocol packets?

Upvotes: 0

Views: 3841

Answers (1)

user862787
user862787

Reputation:

If by "neighbour discovery protocol" you mean the IPv6 Neighbor Discovery Protocol in RFC 4861, then it uses ICMPv6 packets, so "only capture ICMP (both for IPv4 and IPv6) and ARP and neighbour discovery protocol packets" is equivalent to "only capture ICMP (both for IPv4 and IPv6) and ARP packets".

The capture filter for that (for tcpdump, Wireshark, or any other program that uses libpcap for filtering) is icmp or icmp6 or arp.

Upvotes: 1

Related Questions