From owner-freebsd-net@freebsd.org  Tue Feb  6 22:49:57 2018
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1B839F0F077
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Tue,  6 Feb 2018 22:49:57 +0000 (UTC)
 (envelope-from davida@truespeed.com)
Received: from mail.truespeed.com (mail.truespeed.com [31.210.26.210])
 by mx1.freebsd.org (Postfix) with ESMTP id B411387248
 for <freebsd-net@freebsd.org>; Tue,  6 Feb 2018 22:49:56 +0000 (UTC)
 (envelope-from davida@truespeed.com)
Received: from dspam.truespeed.com (localhost [127.0.0.1])
 by mail.truespeed.com (Postfix) with SMTP id E98CB26873D
 for <freebsd-net@freebsd.org>; Tue,  6 Feb 2018 22:49:55 +0000 (UTC)
Received: from [192.168.0.19]
 (cpc130860-hawk18-2-0-cust75.know.cable.virginm.net [77.100.156.76])
 (Authenticated sender: davida@truespeed.com)
 by mail.truespeed.com (Postfix) with ESMTPSA id 85D37268731;
 Tue,  6 Feb 2018 22:49:55 +0000 (UTC)
From: David Athay <davida@truespeed.com>
Message-Id: <28A5CF82-5091-42AA-8C91-C190BAFF5F30@truespeed.com>
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: tcpdump filter not functioning correctly with igb on FreeBSD 11.1
Date: Tue, 6 Feb 2018 22:49:54 +0000
In-Reply-To: <5A7A3079.4080404@grosbein.net>
Cc: freebsd-net@freebsd.org
To: Eugene Grosbein <eugen@grosbein.net>
References: <95AA0EAB-B3D6-4E68-83B2-914894D6FB90@truespeed.com>
 <5A7A1657.4050706@grosbein.net>
 <E149211C-9207-4162-950D-1BA788AA3A5F@truespeed.com>
 <5A7A19DD.6050400@grosbein.net>
 <64C4AA32-5A49-4D6F-B7A7-93CDB0E59F09@truespeed.com>
 <5A7A24DC.0@grosbein.net>
 <293C7809-A1AE-4040-8963-F9A6802CB898@truespeed.com>
 <5A7A29D6.3050307@grosbein.net>
 <DBA7BD66-CDB7-4FF2-88E4-EBC2B71E1F3E@truespeed.com>
 <5A7A3079.4080404@grosbein.net>
X-Mailer: Apple Mail (2.3273)
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.25
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Feb 2018 22:49:57 -0000



> On 6 Feb 2018, at 22:47, Eugene Grosbein <eugen@grosbein.net> wrote:
>=20
> Well, that explains everything. You should use "vlan and not port 22" =
and "vlan and host X.X.X.X"
> (same without "not") when filtering vlan-tagged traffic as documented =
in the pcap-filter(7) manual page
> or else you get wrong results. "Works as intended".
>=20
> Deinstall extra tcpdump/libcap packages, if you do not need them.
>=20
>=20

That worked, thanks!