Sponsored Content
Operating Systems Linux Debian tcpdump filter (mis)behaviour Post 302506591 by Hollinch on Monday 21st of March 2011 09:56:44 AM
Old 03-21-2011
OK I found it, with Google's help...

Apparently I need to add 'vlan and ...' to my filter expression when VLANs are used. Without filter expression, tcpdump and libpcap just output everything, but as soon as filters are specified, the vlan tagging needs to be specified.

See here Blog Stéphane Bortzmeyer: Un exemple de panne amusante de tcpdump

Hope it is useful to others as well.
 

7 More Discussions You Might Find Interesting

1. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command (2 Replies)
Discussion started by: chenhao_no1
2 Replies

2. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks (2 Replies)
Discussion started by: ant04
2 Replies

3. Shell Programming and Scripting

Report a missing property and property value mis match script.

Hi All, I have 2 properties files - one is a master templete and other one is a node specific properties file, I need to comapre these 2 properties files and make sure the node Specific properties file contains all the properties in the master temple properties file else report the missing... (5 Replies)
Discussion started by: jayka
5 Replies

4. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:) (1 Reply)
Discussion started by: SoulZB
1 Replies

5. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My... (3 Replies)
Discussion started by: Ultrix
3 Replies

6. Shell Programming and Scripting

sed to remove newline chars based on pattern mis-match

Greetings Experts, I am in AIX; I have a file generated through awk after processing the input files. Now I need to replace or remove the new-line characters on all lines that doesn't have a ; which is the last character on the line. I tried to use sed 's/\n/ /g' After checking through the... (6 Replies)
Discussion started by: chill3chee
6 Replies

7. War Stories

The (Mis)Information Age – The End of the World as We Know It and What Vault7 Teaches Us

I hope you will enjoy reading this essay I wrote: The (Mis)Information Age – The End of the World as We Know It and What Vault7 Teaches Us If you are a true "IT person" i.e. a software developer, code or deep system admin, I think you will resonate with the theme of my essay. I could... (8 Replies)
Discussion started by: Neo
8 Replies
PFC(1)							      General Commands Manual							    PFC(1)

NAME
pfc - active precompiled filters generator SYNOPSIS
pfc <expression> >/etc/ppp/your.active.filter DESCRIPTION
This manual page documents briefly the pfc command. pfc is the Precompiled Filter Compiler - a tool to generate "active precompiled filters". If your pppd supports this feature, you can use this utility to generate the filter files. The Active Filter allows a connect on demand pppd to determine what is 'interesting' traffic, and then initiate the PPP session. The tool allows you to create the filters, in libpcap format, for use by pppd. Common filters are used to ignore traffic (ie: ntp, various protocol keepalives, etc...) so PPP sessions are not initiated until 'real' traffic requires them. Note that the generated compiled filter expression is specific to point-to-point links, and differs from the format generated by tcpdump -ddd. (specify precompiled-active-filter=/etc/ppp/your.active.filter in the ppp options file) EXAMPLE
/usr/bin/pfc ntp and ldap > /etc/ppp/your.active.filter SEE ALSO
pfc is from the FLoppy Isdn 4 Linux project - see http://www.fli4l.de/en/home/news/ AUTHOR
This manual page was written by Roberto C. Sanchez <roberto@connexer.com>, for the Debian project (but may be used by others). October 30, 2008 PFC(1)
All times are GMT -4. The time now is 07:21 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy