Daniel Borkmann <danborkm...@iogearbox.net> writes: > Speaking of netsniff-ng where we don't reconstruct VLAN headers, users > have reported that depending on the NIC/driver resp. ethtool setting, > they can come in stripped or not (in the pf_packet's rx_ring buffer). > However, I assume VLAN AUXDATA is always consistent (and so the > BPF/BPF JIT filtering).
Yes it was a mess before we added software stripping of the vlan headers a year ago. Eric _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
