Re: Sniffing inbound ethernet frames only

[Jost-DVSB () t-online de]

Jefferson Ogata wrote:
> Have you tried
>
> left window: not ether src mac:addr:of:eth0
> right window: not ether src mac:addr:of:eth1

Hello Jefferson,

thanks for the quick response.
Is there a per process filtering or is there
one kernel filter for all processes? In the latter
case the filter rule of the second invocation
of tcpdump would overwrite the rule of the
first invocation of tcpdump, isn't it?

Best Regards
jojo


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.