Alexandre Ferrieux

With pleasure; however the original issue being closed and locked against comments, I figured it was the only way to reopen the discussion. Please tell me if there was another...

DONE: #9147

Note what looks like a permafail of Cirrus CI, FreeBSD 12.3 and 13.1 both stumbling on a missing Python package... I assume you detected this already, as it happens on...

Ok, I understand why the kernel sets the tag aside ; what I'm wondering about is why not hide that complexity from the SLLv[12] observers, by shuffling a few bytes...

Yes, I was referring to the callback side :) Note that for the single-VLAN case, the bug amounts to a mere permutation, no information is lost (I verified this by...

Thanks for giving the perspective for "any". However, when capturing a single device like "eth1", the whole frame is passed untouched, and indeed any BPF filter needing to "dig deep"...

Thanks, indeed seeing "any" as a provider of network-layer traffic is the key. Somehow that was not obvious from the name. Then, you're right, an "anyraw" would cover all the...

> What version of what Linux distribution are you using? Perhaps they inserted a bug with an "improvement" such as that. We are observing this on current Debian stable (11.3):...

Just done so, same results. Reproducing steps: ```shell $ ip link add link wlan0 wlan0.24 type vlan id 24 $ ifconfig wlan0.24 1.0.24.1/24 $ ping -n 1.0.24.3 > /dev/null 2>&1...

```shell DLT_LINUX_SLL: set vlan_offset to 14 tcpdump.4.99.1: data link type LINUX_SLL2 tcpdump.4.99.1: verbose output suppressed, use -v[v]... for full protocol decode listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot...