Re: [tcpdump-workers] VLAN BPF filter

2011-08-22 Thread Ambika Tripathy
Thanks a lot Steinar, Then how can we make a generic solution for VLAN and Q-n-Q VLAN filter simultaneously with other complex filters at place. Because I see below solution "'(ether[12:2]==0x8100) and (ether[14:2]&4095==7 or ether[14:2]&4095==10)'" works fine if no IP or TCP layer filter present,

Re: [tcpdump-workers] VLAN BPF filter

2011-08-22 Thread sthaug
> I want to filter packets having VLAN id 7 or VLAN ID 10. Those are not Q-n-Q > VLAN ID. So what should be perfect BPF syntax for it. > > > > When I tried using below syntax, it results only those packets having VALN ID > as 7 and src host 10.21.22.2. > > ""( ( vlan 7 and src host 10.21.22.

[tcpdump-workers] VLAN BPF filter

2011-08-22 Thread Ambika Tripathy
Hi, I want to filter packets having VLAN id 7 or VLAN ID 10. Those are not Q-n-Q VLAN ID. So what should be perfect BPF syntax for it. When I tried using below syntax, it results only those packets having VALN ID as 7 and src host 10.21.22.2. ""( ( vlan 7 and src host 10.21.22.2 ) or ( v