On 2006-10-23 15:13, [EMAIL PROTECTED] wrote: > Jefferson Ogata wrote: >> Have you tried >> >> left window: not ether src mac:addr:of:eth0 >> right window: not ether src mac:addr:of:eth1 > > Hello Jefferson, > > thanks for the quick response. > Is there a per process filtering or is there > one kernel filter for all processes? In the latter > case the filter rule of the second invocation > of tcpdump would overwrite the rule of the > first invocation of tcpdump, isn't it?
Filtering is per process, or really per raw socket. -- Jefferson Ogata <[EMAIL PROTECTED]> NOAA Computer Incident Response Team (N-CIRT) <[EMAIL PROTECTED]> "Never try to retrieve anything from a bear."--National Park Service - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
