Re: Log ARP headers
Slavko <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
On 5. marca 2025 13:20:16 UTC, Slavko <[email protected]> wrote: >That "solves" the "Unknown protocol family" problem and packets are >logged with ARP entries (beside others): > > arp.hwtype=1, > arp.protocoltype=2048, > arp.operation=1, > arp.saddr=158.160.47.125, > arp.daddr=168.160.47.125, Ah, i forget to mention, that fields "arp.[ds]hwaddr" are missing in log. regards -- Slavko https://www.slavino.sk/