On Thursday, February 20, 2014 3:40:46 PM UTC-8, Daniel Borkmann wrote: > > On 02/21/2014 12:35 AM, Tim Sailer wrote: > > Hi all, > > I'm trying to move to the new Ubuntu LTS version that's going to be > up in > > April, but I have an issue. With the new 3.x kernels, libpcap support is > > broken regarding sniffing vlans. It works perfectly in 2.4 and 2.6 > kernels. > > > > Since I saw that netsniff-ng didn't use libpcap, I figured it would > work. > > I'm sniffing traffic outside a firewall that is a mix of multiple vlans > and > > non-vlan-tagged traffic. So, I installed the package, fired it up and... > no > > vlan traffic. I'm sure I'm missing something, but I've googled my > fingers > > off today, and I'm not too proud to ask for help... So, HELP? Can > someone > > please show me what I'm missing? I've tried with no filters, with > filters > > with or without vlans, and I just get results on non vlan frames. > > What filter do you use? Have you tried the bpfc man page (man bpfc) from a > recent netsniff-ng git tree? > > Cheers, > > Daniel >
I tried with no filter (in theory, all packets, right?), then 'vlan and dst port 80' converted to bpf with tcpdump -dd. That gives absolutely no results. 'dst port 80' gives me all the untagged packets. Tim -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
