I am using wireshark, and was trying to match packets on the IPv6 prefix using an expresion like:
ipv6.src == 2002::/16
But that did not work. After a bit of searching I found a suggestion for a workaround, which was to use two expressions to specify an interval such as:
(ipv6.src >= 2002:: && ipv6.src < 2003::)
However that does not work either. The later does not do the same in cases where packets are going through any sort of IPv6 inside IPv6 tunnel because the two subexpressions may be applied to the different IPv6 headers in the packet.
Does anybody here know of a way to work around that?