Re: [tcpdump-workers] Custom decoding offset? (for batman-adv)

2020-11-06 Thread Denis Ovsienko via tcpdump-workers
--- Begin Message --- On Fri, 6 Nov 2020 14:34:12 +0100 Linus Lüssing via tcpdump-workers wrote: [...] > Which suggests something like: > > $ tcpdump -i eth0 -w - | editcap -C 82 - - | tcpdump -r - > > However, ideally I would like to use a custom offset in a project > based on libpcap: > >

[tcpdump-workers] Custom decoding offset? (for batman-adv)

2020-11-06 Thread Linus Lüssing via tcpdump-workers
--- Begin Message --- Hi! I would like to use tcpdump and libpcap to filter and examine batman-adv packets. batman-adv is a mesh routing protocol which encapsulates layer 2 ethernet frames. I know my way to identify batman-adv packets via raw ether filters. What I would like to additionally do