1 | initial version |
libpcap's BPF compiler doesn't generate code to test for (R)PVST+, as per libpcap issue #678. There isn't a convenient way to test for that; you'd have to use the expr relop expr mechanism in the pcap filter language to test for it - and you'd have to take the VLAN header's presence into account.