packet sniffer and filter (v2.8)

RouterOS General
1

I’m trying to use the packet sniffer just to monitor DHCP traffic, but it doesn’t seem to work right.

If I understand the manual correctly I should be able to specify the following to sniff only dhcp traffic :

filter-protocol ip-only
filter-address1 0.0.0.0/0:67-68
filter-address2 0.0.0.0/0:67-68

However, when I try this the packet sniffer catches every single packet and appears to ignore the filtering.

2

If im not too tired right now - I believe dhcp is not ip … arp is its own protocol. You need to packet sniff all frames i believe.

Sam

3

Sam, you are tired. DHCP is a UDP protocol.

4

Yep, you are correct. I think I was too sleepy : )

Sam