It might be useful to sniff for vlan header info which might be not injected into packet if reordering is on and if physical device supports VLAN offloading. But these fields are kept in skb and are stored in tpacket v2/v3 struct, so they can be printed.
Meanwhile tpacket v3 struct is used, v2 will be used when there will be some unified tpacket struct with version field, because current code can indicate only if tpacket v3 is used. Vadim Kochan (2): netsniff-ng: vlan: Use helpers when parse vlan header netsniff-ng: vlan: Show vlan info from tpacket v3 dissector.h | 11 +++++++++++ proto_vlan.c | 7 ++++--- proto_vlan.h | 27 +++++++++++++++++++++++++++ ring.h | 24 ++++++++++++++++++++++++ 4 files changed, 66 insertions(+), 3 deletions(-) create mode 100644 proto_vlan.h -- 2.4.2 -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to netsniff-ng+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.