On 03/11/2014 12:19 AM, Tim Sailer wrote:
On Tuesday, February 25, 2014 5:19:06 AM UTC-8, Daniel Borkmann wrote:
...
Instead, try using the following BPF filter:
(Any VLAN packet)
ld vlanp
jeq #0, drop
ret #-1
drop: ret #0
I'm just getting back to this madness... I try to compile that and get an
error:
Syntax error at line 1: vlanp! syntax error, unexpected label, expecting
'[' or 'M' or '#'!
$ cat foo
ld vlanp
jeq #0, drop
ret #-1
drop: ret #0
$ bpfc foo
{ 0x20, 0, 0, 0xfffff030 },
{ 0x15, 1, 0, 0x00000000 },
{ 0x6, 0, 0, 0xffffffff },
{ 0x6, 0, 0, 0x00000000 },
$ bpfc -v
bpfc 0.5.8-rc3+ (Ziggomatic), Git id: v0.5.8-rc3-7-ge6033f4
So what version are you using?
Is there any way to get both van and 'not vlan' packets this way?
Of course, instead of jumping to drop label you could jump to
a different label instead, and continue processing.
Tim
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
