Re: [tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet

Guy Harris schrieb: Karl Gaissmaier wrote: There are missing CASE statements for DLT_PRISM_HEADER in the different filter checks and a modified gen_wlanhostop to shift the packet the prism header length, but using the same logic as for the DLT_IEEE802_11 link layer. It requires more than that. I

[tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet addresses supported only on ethernet/FDDI/token ring/802.11/ATM LANE/Fibre Channel")

Hello, the following bpf filters with ethernet addresses like 'ether host ' or synonym: 'wlan host ' and others with mac address checks like gateway, multicast, ... are not handled within gencode.c if you monitor a WLAN device in monitor mode with PRISM header prependend. There are missing CASE sta