Hi there ! I have been looking to the ebtables website, and in particular to the flowchart : http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png I am trying to have the following behaviour : On eth0, I have several types of frames, IP, 802.1Q and other things. I would like to have other things forwarded directly to eth1, and I would like to analyse the IP and 802.1Q frames. I mean : I don't want to see the frames in my local process. I have done the following : - Creating a bridge between eth0 and eth1, no stp. - ebtables -t broute -A BROUTING -p IPv4 -j DROP - ebtables -t broute -A BROUTING -p 802.1q -j DROP This seems to work, as no IP nor VLAN frames are going out from eth1. Then, my question is : How can I "listen" to eth0, in order to get the complete frames (I need all the ethernet frames when IP or 802.1Q). I thought about something like a PF_PACKET, but I am not sure if I need to be in promiscuous mode or not... I did some tries, but nothing worked, so I prefer asking :-). Thanks in advance ! Best Regards, JM _______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge