Re: [tcpdump-workers] Any way to filter ether address when type is LINUX_SLL?

2021-01-19 Thread Edouard Gaulué via tcpdump-workers
--- Begin Message --- And is there any way to filter by link-type? In fact, I need only those LINUX_SLL. Regards, Le 29/12/2020 à 22:39, Michael Richardson a écrit : Edouard Gaulué via tcpdump-workers wrote: > I get a pcap flow from my router box (Peplink). The only thing I can change

Re: [tcpdump-workers] Any way to filter ether address when type is LINUX_SLL?

2021-01-19 Thread Edouard Gaulué via tcpdump-workers
--- Begin Message --- For posterity, I did: ncat -l 12345 | tshark -r - -w - sll > w where w is named pipe. Instead of: ncat -l 12345 | tcpdump -r - -w - [pcap_filter] > w Your answer leads me to this solution, I needed an upper-level tool. Regards, Le 19/01/2021 à 15:45, Michael Richardson