New Packet Capture Interface not acting as expected.
-
I'm having difficulty figuring this out.
So far I have not been able to get it to filter anything.
It always seems to add "or ((not vlan))"
To any attempt I make to do anything.
And that clearly just captures "everything"
Even though I have exclude all selected for TAGGED PACKETS/usr/sbin/tcpdump -ni hn0 -c 1000 -U -w - '((port 25)) or ((not vlan))'
I feel stupid for having to ask but how do I get it to not add this to the end?
Any pointers appreciated.
Thanks! -
That was a bug. It's fixed in current snapshots. As you stated it should filter for 'and' not 'or'.
Steve
-
@stephenw10 Yep just saw that...
It's working on the latest build!
Very cool!/usr/sbin/tcpdump -ni bge0.5 -c 1000 -U -w - '((port 25)) and ((not vlan))'
