Ask Your Question

moacir's profile - activity

2019-08-05 18:09:38 +0000 received badge  Famous Question (source)
2019-08-05 18:09:38 +0000 received badge  Notable Question (source)
2019-08-05 18:09:38 +0000 received badge  Popular Question (source)
2018-07-06 17:51:31 +0000 commented answer Vlan filter

I will then use tcpdump and look at the results, looking for the right filter for the version I have.

2018-07-06 17:49:47 +0000 commented answer Vlan filter

Launching few instances of tshark for the vlans I want looks a good idea, as wireshark will then synchronize them. The p

2018-07-06 14:37:45 +0000 commented answer Vlan filter

Cmaynard, I am sure I am capturing vlan traffic. Actually, the problem is capturing too much traffic. But I will do the

2018-07-05 20:54:39 +0000 commented answer Vlan filter

I will stop bugging you for a day and go over the documentation you recommended and do some tests (RTFM). Just as info (

2018-07-05 20:00:30 +0000 commented answer Vlan filter

That is really "crazy"... When I use dumpcap using your last suggestion I get: dumpcap -i ens4f0 -f '(ether[12:2] = 0x8

2018-07-05 18:49:57 +0000 commented question Vlan filter

Look: yum list installed | grep libcap compat-libcap1.x86_64 1.10-7.el7 @anaconda/7.4 libcap.x86_64

2018-07-05 17:49:07 +0000 commented question Vlan filter

I must confess that when it comes to dumpcap I am just a dummy. Anyway, I am using CentOS 7 and I did use dumpcap as you

2018-07-05 10:51:25 +0000 commented question Vlan filter

Jaap, I just tested your suggestion using 'vlan and (ether[14:2]&0x0fff != 100 and ether[14:2]&0x0fff != 200)',

2018-07-05 08:48:31 +0000 received badge  Rapid Responder
2018-07-05 08:48:31 +0000 answered a question Vlan filter

NJL, what I am doing is exactly what is suggested on the post. If I understood correctly, you can not capture two VLANs

2018-07-05 08:13:02 +0000 asked a question Vlan filter

Vlan filter I am capturing traffic from a trunk mirror. This trunk has over 30 VLANs and I would like to exclude some of