https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16116

--- Comment #2 from Christopher Maynard <christopher.mayn...@igt.com> ---
(In reply to michal.pecuch from comment #0)
> LC_IDENTIFICATION=sk_SK.UTF-8, with libpcap version 1.8.1

It's possible this is a libpcap bug.  You could try upgrading to the latest
version, currently 1.9.1, to see if this problem has been fixed?  Download
from: https://www.tcpdump.org/.  There are a couple of VLAN-related issues
mentioned in the changelog; it's possible that one of those fixed this issue. 
See: https://www.tcpdump.org/libpcap-changes.txt

> On Ubuntu 19.04 on two similar computers.
> When capturing live data using capturing filter to filter specific vlan
> (vlan 545) for some reason only ethernet frames with CoS 0 are captured.
> Frames with the same vlan tag and CoS 4 are not captured by this filter.
> Without capturing vlan filter all frames are captured.

Have you looked at the resulting BPF code for the "vlan 545" capture filter to
see if it's sane?  Running 'dumpcap -f "vlan 545" -d' on my system yields the
following, which looks correct to me:

Capturing on 'foo'
(000) ldh      [12]
(001) jeq      #0x8100          jt 2    jf 6
(002) ldh      [14]
(003) and      #0xfff
(004) jeq      #0x221           jt 5    jf 6
(005) ret      #65535
(006) ret      #0

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to