--- Begin Message ---Bill Fenner via tcpdump-workers <tcpdump-workers@lists.tcpdump.org> wrote: > It would be perfectly reasonable (and fairly straightforward) to update > libpcap to be able to filter on the Ethernet address in DLT_LINUX_SLL > or DLT_LINUX_SLL2 mode. There are already filters that match other > offsets in the SLL or SLL2 header. However, I don't think it could be > done on live captures, only against a savefile.Yes, I agree.
--- End Message ---
_______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
