Re: print vlan number

[Guy Harris <guy () alum mit edu>]

On Jun 16, 2014, at 1:53 AM, richard lucassen <mailinglists () lucassen org> wrote:

> Just a simple question: I have eth1 with some VLAN's. When tcpdumping
> with:
>
> # tcpdump -h
> tcpdump version 3.9.8
> libpcap version 0.9.8
>
> the vlan tags are printed using "tcpdump -ni eth1":
>
> 10:16:12.068967 vlan 65, p 0, IP 10.65.0.196.49189 > 10.2.131.14.2598

I can find nothing in the standard tcpdump 3.9.8 code that would cause the VLAN tags to be printed if you haven't 
specified the -e flag to tcpdump.

Is this standard tcpdump 3.9.8, downloaded in source form from tcpdump.org, and compiled, or is it some version of 
tcpdump provided by the supplier of your OS?  If it's the latter, what OS is that (for Linux, as I suspect this is from 
"eth1", what distribution is it), and what version (for Linux, what's the version of the distribution, not of the 
kernel)?

_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers