Revision history [back]

This is not a Wireshark issue.

I can reproduce this on my Ubuntu 20.04 VM with tcpdump:

$ sudo tcpdump -i ens33 "vlan and pppoes and tcp" Warning: Kernel filter failed: Invalid argument tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ens33, link-type EN10MB (Ethernet), capture size 262144 bytes ^C 0 packets captured 11 packets received by filter 0 packets dropped by kernel

Please file an issue on the libpcap issue list (and send a heartfelt "thank you!" to the Linux networking stack developers for the "extract VLAN tags from the packet and stuff them into skbuff metadata, so anything doing packet filtering and packet capture has to work around this packet mutilation" part of the kernel code).

This is not a Wireshark issue.

I can reproduce this on my Ubuntu 20.04 VM with tcpdump:

 $ sudo tcpdump -i ens33 "vlan and pppoes and tcp"
Warning: Kernel filter failed: Invalid argument
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ens33, link-type EN10MB (Ethernet), capture size 262144 bytes
^C
0 packets captured
11 packets received by filter
0 packets dropped by kernel