From pcap_filter manual...

[Eddie Harari <eddie.harari () gmail com>]

BUGS section:
"  Filter  expressions  on  fields other than those in 802.11 headers will
  not correctly handle 802.11 data packets with both To DS  and  From  DS
  set."

is this only for libpcap programmers  ? or also tcpdump users ?


I have same program that basically sets a filter and sniff the network for
packets after that...
what i see as a behavior is the following:

Network A -> program runs with no problems. (AP is Edimax..ED.).
Network B -> program runs ( on same machine), but the filter does not seem
to work. if i set the filter to something very very simple such as
filter="icmp" it does not seems to show me any packet ( not even 1 ) , but
if i use tcpdump command  with the same filter on the same network device,
it does show me the packets.
note that same program on same machine on Network A is working perfectly.


 anyone has an idea as for where to start looking for the problem ?

E.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.