Re: Any way to filter ether address when type is LINUX_SLL?

[Michael Richardson via tcpdump-workers <tcpdump-workers () lists tcpdump org>]

> --- Begin Message ---
>
>
> From: Michael Richardson <mcr () sandelman ca>
>
> Date: Thu, 21 Jan 2021 16:17:57 -0500
>
> Bill Fenner via tcpdump-workers <tcpdump-workers () lists tcpdump org> wrote:
>     > It would be perfectly reasonable (and fairly straightforward) to update
>     > libpcap to be able to filter on the Ethernet address in DLT_LINUX_SLL
>     > or DLT_LINUX_SLL2 mode.  There are already filters that match other
>     > offsets in the SLL or SLL2 header.  However, I don't think it could be
>     > done on live captures, only against a savefile.
>
> Yes, I agree.
>
> --- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers