Re: [tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet

Guy Harris schrieb: Karl Gaissmaier wrote: There are missing CASE statements for DLT_PRISM_HEADER in the different filter checks and a modified gen_wlanhostop to shift the packet the prism header length, but using the same logic as for the DLT_IEEE802_11 link layer. It requires more than that. I f

Re: [tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet

Karl Gaissmaier wrote: There are missing CASE statements for DLT_PRISM_HEADER in the different filter checks and a modified gen_wlanhostop to shift the packet the prism header length, but using the same logic as for the DLT_IEEE802_11 link layer. It requires more than that. ARPHRD_PRISM is used in

Re: [tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet addresses supported only on ethernet/FDDI/token ring/802.11/ATM LANE/Fibre Channel")

On Wed, Jan 26, 2005 at 01:44:28PM +0100, Karl Gaissmaier wrote: | Hello, | | the following bpf filters with ethernet addresses like | 'ether host ' or synonym: 'wlan host ' | and others with mac address checks like gateway, multicast, ... | are not handled within gencode.c if you monitor a WLAN d

[tcpdump-workers] DLT_PRISM_HEADER etc. and bpf_error("ethernet addresses supported only on ethernet/FDDI/token ring/802.11/ATM LANE/Fibre Channel")

Hello, the following bpf filters with ethernet addresses like 'ether host ' or synonym: 'wlan host ' and others with mac address checks like gateway, multicast, ... are not handled within gencode.c if you monitor a WLAN device in monitor mode with PRISM header prependend. There are missing CASE sta