Unable to broute packets containing VLAN tag

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello.

I'm having problems trying to broute packets from ebtables to iptables
(DROP target) when the packet contains VLAN tags.

My system is sniffing all packets coming from a tap interface, a
bridge is configured so that the interface is set to promiscuous mode.

When the packets does not contain the VLAN tags, everything works ok,
and the packet is sent to the iptables layer without any problem.

But when the packet contains VLAN info, the packet seems to get
dropped, and iptables layer does not receive it.

Please note that I need promiscuous mode both for destination MAC
addresses and VLAN tags. I mean, I want to sniff everything: all
packets going to anywhere and belonging to any VLAN.

Thanks.
-Bob
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux