Do you want to do packet capture or packet filtering? For packet capture, have a look at tcpdump. I know it can capture based on source and/or destination Ethernet address. Not sure if it can capture on the other field that you are looking for. Take care, Bruce... -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of colorchip@xxxxxxxx Sent: Wednesday, September 21, 2005 9:29 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: raw packet capture based on offset Hi, I want to capture raw packets based on the ethernet source (mac) and a 16 bit identifier following the ethtype. I am unable to find a generic filter which gives me a freedom to filter the packet based on any bit length and offset from the beginning of the packet. Can anyone help? -nks
