[tcpdump-workers] noting & packet filter of libpcap

2015-01-23 Thread Gerhard Mourani
Hello list, I’m using ntopng which rely on libpcap for the filtering expression. Below is what I think to be valide to use into my ntopng configuration file but seem to not working at all. --packet-filter "ip and not proto ipv6 and not ether host ff:ff:ff:ff:ff:ff and not net (224.0.0.0/8 or 2

Re: [tcpdump-workers] ntopng & packet filter of libpcap

2015-01-23 Thread Gerhard Mourani
> On Jan 23, 2015, at 12:25 PM, Gerhard Mourani wrote: > >> I’m using ntopng which rely on libpcap for the filtering expression. Below >> is what I think to be valide to use into my ntopng configuration file but >> seem to not working at all. >> >> --packe

Re: [tcpdump-workers] ntopng & packet filter of libpcap

2015-01-23 Thread Gerhard Mourani
29 jf 28 (028) ret #65535 (029) ret #0 > On Jan 23, 2015, at 5:48 PM, Guy Harris wrote: > > > On Jan 23, 2015, at 1:23 PM, Gerhard Mourani wrote: > >> Yes, it is what I want but seem that ntopng doesn’t take it in consideration >> because I can still

Re: [tcpdump-workers] ntopng & packet filter of libpcap

2015-01-23 Thread Gerhard Mourani
. So I try to exclude the IP of the probe itself and it still appears in the result! On Fri, Jan 23, 2015 at 9:03 PM, Guy Harris wrote: > > On Jan 23, 2015, at 5:44 PM, Gerhard Mourani wrote: > > > On mine I get: > > The same code. > > If you're seeing packets t