<div>
<div class="content wysiwyg-content">
I wish to apply a display filter to a Wireshark capture that contains several ARP exchanges when no filter is applied.<br />
I have tried three different filters (one at a time) as follows:<br />
&nbsp;ip.proto == ARP<br />
&nbsp;ip.proto == 0x0806 <br />
&nbsp;ip.proto == 2054<br />
&nbsp;but in either case, when the filter is applied there are no packets shown.<br />
<br />
What filter should I be applying ?<br />
<br />
I am using Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)
</div>
</div>


I wish to apply a display filter to a Wireshark capture that contains several ARP exchanges when no filter is applied.
I have tried three different filters (one at a time) as follows:
 ip.proto == ARP
 ip.proto == 0x0806 
 ip.proto == 2054
 but in either case, when the filter is applied there are no packets shown.

What filter should I be applying ?

I am using Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)

wireshar for IP ARP

Networking software modules are interfaced with a framework implemented on the machine's operating system that implements the networking functionality of the operating system. The best known frameworks are the TCP/IP model and the OSI model. Systems typically do not use a single protocol to handle a transmission. Instead they use a set of cooperating protocols, sometimes called a protocol family or protocol suite.[9] Some of the best known protocol suites include: IPX/SPX, X.25, AX.25, AppleTalk and TCP/IP. Other protocols indirectly related to networking include the hypertext transfer protocol (HTTP) and its related technologies, Dynamic Host Configuration Protocol (DHCP), Domain Name Server (DNS) and other Internet protocols.