phshq links2012-09-03T11:44:29+10:00http://phshq.link/http://phshq.link/http://phshq.link/Misadventures with tcpdump Filtershttp://phshq.link/?I7GHgw2012-09-03T11:44:29+10:00For quite some time I’ve been running into a tricksome situation with tcpdump. I discovered the problem is entirely to do with 802.1q tagged packets. Since this pcap was taken from a mirrored port of a switch using VLANs it follows all the same rules as a trunked interface.<br>(<a href="http://phshq.link/?I7GHgw">Permalink</a>)