Method: PGN is not the entire CAN ID
The 29-bit identifier contains priority, page bits, PDU format, PDU specific and source address. When PF is below 240 (PDU1), PS is a destination address and the PGN low byte is zero. At PF 240 or above (PDU2), PS is a group extension included in the PGN.
A PGN-only mask is 0x03FF0000 for PDU1 or 0x03FFFF00 for PDU2. The chosen optional fields add their bits. Matching tests (received ID & mask) === (target ID & mask); priority and source are ignored unless selected.
Example and next decision
The default target 18EAFF00 and comparison 18EA8001 both identify PGN 59904. Changing destination or source does not change that PDU1 PGN. Selecting destination excludes the second frame; selecting source excludes source 01. A PDU2 destination selection is rejected because its PS field is not a destination.
Why a correct mask may still miss traffic
This tool does not configure a controller or driver. Confirm IDE/extended-frame selection, logger flags, mask polarity, hardware filter bank layout and capture channels using the interface documentation. A numerical ID below 0x800 can still be an extended frame; the number alone does not prove its frame format.
Passive capture review only. No connection to equipment, no bus transmission, no safety clearance and no protocol certification. A clean result describes the supplied bytes, not the completeness of the original recording.