hi,all according to my test, the order to process packets is ebtables, tcpdump,iptables? i want to know why if i am right? how tcpdump capture packets and at which level? thanks _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers