Hot Topics

BPF syntax

Mixed VLAN tags and BPF syntax

Mixed VLAN tags and BPF syntax

| | Berkeley Packet Filter, BPF syntax, dns, Linux, Network Security, network security monitoring, network visibility, port 443, Raspberry Pi, SPAN port, TCP, tcpdump, Ubiquiti, VLAN, Wireshark, Zeek
By Richard Bejtlich, Principal Security Strategist, Corelight This post contains a warning and a solution for anyone using BPF syntax when filtering traffic for network security monitoring.  Introduction I have been writing ...
Bright Ideas Blog