Mailinglist Archive: opensuse-bugs (9721 mails)
| < Previous | Next > |
[Bug 340658] libpcap problem? tcpdump and wireshark filter expressions don' t work on tagged 802.1q packets
- From: bugzilla_noreply@xxxxxxxxxx
- Date: Wed, 21 Nov 2007 11:31:47 -0700 (MST)
- Message-id: <20071121183147.7DA72CC6B4@xxxxxxxxxxxxxxxxxxxxxx>
https://bugzilla.novell.com/show_bug.cgi?id=340658#c2
Tamás Németh <nice@xxxxxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #2 from Tamás Németh <nice@xxxxxxxxxxxxxxx> 2007-11-21 11:31:47
MST ---
After RTFM-ing well I learned that tcpdump and wireshark work perfectly. This
bugreport was because of my ignorance. See man tcpdump:
vlan [vlan_id]
True if the packet is an IEEE 802.1Q VLAN packet. If
[vlan_id] is specified, only true if the packet has the specified
vlan_id. Note that the first vlan keyword
encountered in expression changes the decoding offsets for the remainder of
expression on the assumption that the packet is a VLAN
packet. The vlan [vlan_id] expression may be used more than once, to
filter on VLAN hierarchies. Each use of that expression
increments the filter offsets by 4.
For example:
vlan 100 && vlan 200
filters on VLAN 200 encapsulated within VLAN 100, and
vlan && vlan 300 && ip
filters IPv4 protocols encapsulated in VLAN 300
encapsulated within any higher order VLAN.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
Tamás Németh <nice@xxxxxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
--- Comment #2 from Tamás Németh <nice@xxxxxxxxxxxxxxx> 2007-11-21 11:31:47
MST ---
After RTFM-ing well I learned that tcpdump and wireshark work perfectly. This
bugreport was because of my ignorance. See man tcpdump:
vlan [vlan_id]
True if the packet is an IEEE 802.1Q VLAN packet. If
[vlan_id] is specified, only true if the packet has the specified
vlan_id. Note that the first vlan keyword
encountered in expression changes the decoding offsets for the remainder of
expression on the assumption that the packet is a VLAN
packet. The vlan [vlan_id] expression may be used more than once, to
filter on VLAN hierarchies. Each use of that expression
increments the filter offsets by 4.
For example:
vlan 100 && vlan 200
filters on VLAN 200 encapsulated within VLAN 100, and
vlan && vlan 300 && ip
filters IPv4 protocols encapsulated in VLAN 300
encapsulated within any higher order VLAN.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
| < Previous | Next > |