This will indeed work but can match non CDP packets.I'm using 'ether[12:2] <= 1500 && ether[14:2] == 0xAAAA ether[16:1] == 0x03 ether[17:2] == 0x0000 ether[19:1] == 0x0C ether[20:2] == 0x2000' for the filter which is much more selective.
Post a Comment
1 comment:
This will indeed work but can match non CDP packets.
I'm using 'ether[12:2] <= 1500 && ether[14:2] == 0xAAAA ether[16:1] == 0x03 ether[17:2] == 0x0000 ether[19:1] == 0x0C ether[20:2] == 0x2000' for the filter which is much more selective.
Post a Comment