Re: pcap filters on a VLAN

[Chris Reining <creining () packetfu org>]

> Will a filter like the one below capture IP packets encapsulated in 
> Ethernet frames and IP packets in Ethernet frame with a 802.1q VLAN header?
>
>    ether proto 0x0800
>
> If not, how does one specify capturing IP packets within an Ethernet 
> frame with a 802.1q VLAN header?

ex. -
tcpdump -i eth0 -nn vlan

> What about filter that specify only UDP or TCP ports? Will those filters 
> work for both Ethernet frames and 802.1q VLAN frames?

ex. -
tcpdump -i eth0 -nn vlan and tcp port 22
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe