On 5. marca 2025 13:20:16 UTC, Slavko <linux@xxxxxxxxxx> wrote: >That "solves" the "Unknown protocol family" problem and packets are >logged with ARP entries (beside others): > > arp.hwtype=1, > arp.protocoltype=2048, > arp.operation=1, > arp.saddr=158.160.47.125, > arp.daddr=168.160.47.125, Ah, i forget to mention, that fields "arp.[ds]hwaddr" are missing in log. regards -- Slavko https://www.slavino.sk/