From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rogers.com; s=s2048; t=1424122562; bh=JjQog4wnnFQNrwOmq1EFa0jtaR3bVAHSvoet2NzchNY=; h=From:To:References:In-Reply-To:Subject:Date:From:Subject; b=sNYuY7n9dHf/4e757eZVQzwsEF2yRntKU3RDeJ7Fb9O00/xSlIaUBRCTzIZbZergVE/ASRpIRBSHpI/oFzmNg0KvuyQmjKka3++v8RFiTp2Y8Md1P2EJrjR6+vkHdLK7rYiQvKGxvgPc8jOBL6MDZVDUhbPK96H+Q3cuvb5aoKjKGMqtE9u//LAAiia61q8iB7gGDoGAAa4ZmvwPTPR8ossf1DOE7tcUF1XS6DdAnMyoNa9MpOzxoFzYqagn/ltRS/ZAqRyVXxL7BFA4sp/C/+TChICxvVnYtkKhDfSu6+SjT3Z9A5643/nQ4CLT2/kXX1c5tZliD1VxhRaGBzaQ0A== From: "The Q" References: In-Reply-To: Date: Mon, 16 Feb 2015 16:35:58 -0500 Message-ID: <02f601d04a30$8eb33820$ac19a860$@rogers.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02F7_01D04A06.A5DDCC60" Content-Language: en-ca Subject: [Bridge] Sniffing a linux bridge vs sniffing enslaved interfaces List-Id: Linux Ethernet Bridging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: bridge@lists.linux-foundation.org This is a multipart message in MIME format. ------=_NextPart_000_02F7_01D04A06.A5DDCC60 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all Assume that you have a linux bridge with two interfaces eth0 and eth1 enslaved to this bridge What is the difference between sniffing the bridge and sniffing its interfaces? tcpdump -i br0 vs tcpdump -i eth0 Thanks MiniME ------=_NextPart_000_02F7_01D04A06.A5DDCC60 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = all

Assume that you have a linux bridge with two = interfaces eth0 and eth1 enslaved to this bridge

What is the difference between sniffing the bridge and = sniffing its interfaces?

tcpdump -i = br0 vs tcpdump –i eth0

Thanks

MiniME

------=_NextPart_000_02F7_01D04A06.A5DDCC60--