From owner-freebsd-net@FreeBSD.ORG Thu Mar 10 03:28:59 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9DD516A4CE for ; Thu, 10 Mar 2005 03:28:59 +0000 (GMT) Received: from mailhost.schluting.com (schluting.com [131.252.214.57]) by mx1.FreeBSD.org (Postfix) with ESMTP id 91AA043D66 for ; Thu, 10 Mar 2005 03:28:59 +0000 (GMT) (envelope-from charlie@schluting.com) Received: from localhost (localhost [127.0.0.1]) by mailhost.schluting.com (Postfix) with ESMTP id 26E412231 for ; Wed, 9 Mar 2005 19:28:58 -0800 (PST) Received: from mailhost.schluting.com ([127.0.0.1]) by localhost (schluting.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21175-07 for ; Wed, 9 Mar 2005 19:28:53 -0800 (PST) Received: from [10.1.0.69] (c-24-20-163-50.client.comcast.net [24.20.163.50]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailhost.schluting.com (Postfix) with ESMTP id 1E815209D for ; Wed, 9 Mar 2005 19:28:53 -0800 (PST) Message-ID: <422FBEF3.2060305@schluting.com> Date: Wed, 09 Mar 2005 19:28:51 -0800 From: Charlie Schluting User-Agent: Mozilla Thunderbird 1.0RC1 (Windows/20041201) X-Accept-Language: en-us, en MIME-Version: 1.0 References: <20050309111759.O97008@schluting.com> <3aa4b0ab62a3d4855fdc62383a77b9d5@mac.com> <422F5CF6.9070906@schluting.com> <422F5D66.6020808@schluting.com> <20050309135422.C13519@gateway.posi.net> In-Reply-To: <20050309135422.C13519@gateway.posi.net> X-Enigmail-Version: 0.89.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by your mom at schluting.com cc: net@freebsd.org Subject: Re: tcpdump/bpf and seeing .1q tags X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2005 03:28:59 -0000 Kelly Yancey wrote: > > You'll have a similar issue with BPF programs you write: you'll either > need to skip over the vlan tag header or not, depending on whether you > snagged the packet from the parent interface or the vlan interface. Indeed. Thanks! We skipped 12 bits ahead and everything is working now :)) -Charlie