[GRLUG] Wireshark & eth.addr==

[Adam Tauno Williams]

I have a device with a MAC address of 00.C0.02.37.37.33

I ***SEE*+* that mac address in the "Source" column when looking at
captured traffic in Wireshark.  So I enter a filter of
eth.addr==00.C0.02.37.37.33 or eth.addr==00:C0:02:37:37:33 ... and no
traffic matches the criteria.  Am I having a Monday-Moment or screwing
something up on a grander-scale?  

[I'd swear on sacred-text-of-your-choice that I've done this before
numerous times;  apparently to spiritually deleterious effect.]


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.