On Jun 16, 2014, at 1:53 AM, richard lucassen <mailingli...@lucassen.org> wrote:
> Just a simple question: I have eth1 with some VLAN's. When tcpdumping > with: > > # tcpdump -h > tcpdump version 3.9.8 > libpcap version 0.9.8 > > the vlan tags are printed using "tcpdump -ni eth1": > > 10:16:12.068967 vlan 65, p 0, IP 10.65.0.196.49189 > 10.2.131.14.2598 I can find nothing in the standard tcpdump 3.9.8 code that would cause the VLAN tags to be printed if you haven't specified the -e flag to tcpdump. Is this standard tcpdump 3.9.8, downloaded in source form from tcpdump.org, and compiled, or is it some version of tcpdump provided by the supplier of your OS? If it's the latter, what OS is that (for Linux, as I suspect this is from "eth1", what distribution is it), and what version (for Linux, what's the version of the distribution, not of the kernel)? _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
