To filter out only packets to or from that host, and not filter out all
non-tagged packets, do
!host 192.168.10.2 or (vlan and !host 192.168.10.2)
> that does _not_ work - still get the packets that have the vlan header. I
> have seen tcpdump (and windump) references saying that the parentheses must
> be escaped and/or that the expression must be quoted; is that necessary with
> Windows?
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users