I do see packets, but... I can run tcpdump in the broken mode wherne I can use the filter 'dst port 80 and not vlan' and it will give me every packet that has a vlan tag... (real nice, uhu? ). Comparing those packets with with the netsniff dump without any filter gives me no matching packets.
On Friday, February 21, 2014 1:23:48 AM UTC-8, Daniel Borkmann wrote: > > On 02/21/2014 01:15 AM, Tim Sailer wrote: > ... > >> What filter do you use? Have you tried the bpfc man page (man bpfc) > from a > >> recent netsniff-ng git tree? > > > > I tried with no filter (in theory, all packets, right?), then 'vlan and > > dst port 80' converted to bpf with tcpdump -dd. That gives absolutely no > > results. 'dst port 80' gives me all the untagged packets. > > So, without any filter, you should actually get all packets ... vlan tags > might be stripped though due to hw offloading. Do you see packets w/o any > filtering? > -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
