Re: Sniffing inbound ethernet frames only

[Hannes Gredler <hannes () juniper net>]

> Hello Hannes,
>
> on SuSE 10.1 (Kernel 2.6.16.13-4) I get the
> following message:
>
> # tcpdump -i eth1 inbound ether
> tcpdump: inbound/outbound not supported on linktype 1
> # tcpdump --version
> tcpdump version 3.9.4
> libpcap version 0.9.4
>
> Best regards
> jojo

ok makese sense now - sorry i was confused by junipers DLT for
ethernet which contrary to the 'standard' ethernet DLT 1
does support directions ...

seems the only choice you have left is to filter on your local
MAC adresses to substitute the lack of notion for direction
on the ethernet DLT.

/hannes
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.