1 | initial version |
(This is really a libpcap question, but....)
The packets are always VLAN encapsulated.
That means that all filters must be of the form "vlan XXX"; for example, "vlan ip" to find IP packets, "vlan arp" to find ARP packets, etc..
2 | No.2 Revision |
(This is really a libpcap question, but....)
The packets are always VLAN encapsulated.
That means that all filters must be of the form "vlan and XXX"; for example, "vlan and ip" to find IP packets, "vlan and arp" to find ARP packets, etc..