Revision history  [back]

You can use a slice of eth.addr (Wildcard not working in eth.addr)

eth.addr[0:3] == 00:04:f2

or if using eth.addr.oui, setup the filter to do the math (Add new filters for Ethernet src and dst OUI's as well as their resolved OUI's.)

I would like to use eth.addr.oui == 00:30:59

but instead it is eth.addr.oui == 0*65536+0x30*256+0x59

Seems to work in 4.0.7: