tcpdump mailing list archives
Re: Any way to filter ether address when type is LINUX_SLL?
From: Michael Richardson via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Thu, 21 Jan 2021 16:17:57 -0500
--- Begin Message --- From: Michael Richardson <mcr () sandelman ca>
Date: Thu, 21 Jan 2021 16:17:57 -0500
Bill Fenner via tcpdump-workers <tcpdump-workers () lists tcpdump org> wrote: > It would be perfectly reasonable (and fairly straightforward) to update > libpcap to be able to filter on the Ethernet address in DLT_LINUX_SLL > or DLT_LINUX_SLL2 mode. There are already filters that match other > offsets in the SLL or SLL2 header. However, I don't think it could be > done on live captures, only against a savefile. Yes, I agree.
--- End Message ---
_______________________________________________ tcpdump-workers mailing list tcpdump-workers () lists tcpdump org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
Current thread:
- Re: Any way to filter ether address when type is LINUX_SLL? Edouard Gaulué via tcpdump-workers (Jan 19)
- <Possible follow-ups>
- Re: Any way to filter ether address when type is LINUX_SLL? Edouard Gaulué via tcpdump-workers (Jan 19)
- Re: Any way to filter ether address when type is LINUX_SLL? Bill Fenner via tcpdump-workers (Jan 21)
- Re: Any way to filter ether address when type is LINUX_SLL? Michael Richardson via tcpdump-workers (Jan 21)
- Re: Any way to filter ether address when type is LINUX_SLL? Guy Harris via tcpdump-workers (Jan 22)
- Re: Any way to filter ether address when type is LINUX_SLL? Michael Richardson via tcpdump-workers (Jan 23)
- Re: Any way to filter ether address when type is LINUX_SLL? Bill Fenner via tcpdump-workers (Jan 21)