1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
# filter-eth
#
# Ethernet Filter
#
protocol eth "Ethernet";
#length variable;
parents none;
field src "Source Hardware Address",
ether,
byte_offset(6);
field dst "Destination Hardware Address",
ether,
byte_offset(0);
field srcvendor "Vendor of Source Hardware Address",
byte[3],
byte_offset(6);
field dstvendor "Vendor of Destination Hardware Address",
byte[3],
byte_offset(0);
alias src srcaddr;
alias dst dest, dstaddr, destaddr;
field addr "Hardware Address",
ether,
either_of(src, dst);
alias addr hwaddr;
field vendor "Hardware Vendor",
byte[3],
either_of(srcvendor, dstvendor);
|