Guy Harris

Unfortunately, I couldn't set up a VLAN on the bridge adapter that appears to implement communication between my VMware Fusion virtual machines and my Mac, so I couldn't test it...

> please note that you don't need a working end-to-end VLAN; just like I did with ping eliciting only ARP requests without a single response, you only need to set...

> OK, in the git log I see you've just committed this, so I cloned and compiled HEAD of both libpcap and tcpdump. > However the test still fails the...

> Stderr from the patch: > > ... > > ``` > LINUX_SLL2: set vlan_offset to -1 > ``` OK, so that means that, after tcpdump changes the link-layer type...

In today's episode of "I hate the Linux networking stack", I set up a Debian 11.3.0 VM, with a 5.10.0-13-amd64 kernel, built top-of-the-main branch libpcap and tcpdump, set up two...

> So, somehow, the 0x86ddness of that packet is getting lost somewhere between the adapter driver and tcpdump, whether it's in the networking stack below the `PF_PACKET` code, the `PF_PACKET`...

> digging a bit in the current code of libpcap, I notice the use of the PACKET_AUXDATA sockopt is #ifdef'ed out, because the configure script somehow fails to set HAVE_PACKET_AUXDATA....

> > digging a bit in the current code of libpcap, I notice the use of the PACKET_AUXDATA sockopt is #ifdef'ed out, because the configure script somehow fails to set...

OK, so I've attached a version of pcap-linux.c that attempts to do tag insertion for LINUX_SLL2. It doesn't do anything about QinQ, but that's because the combination of QinQ and...

Not Linux-specific - I reproduced it on macOS.