Feature request - filter command to support a list of mac addresses for BPF filtering

StamusNetworks / gophercap

Accurate, modular, scalable PCAP manipulation tool written in Go.

GNU General Public License v3.0

85 stars 12 forks source link

Feature request - filter command to support a list of mac addresses for BPF filtering #14

Open mpihelgas opened 5 months ago

mpihelgas commented 5 months ago

Currently the YAML file containing BPF filters seems to support only network addresses (i.e., net BPF filter). In some situations it would be nice to be able to also add MAC addresses to be filtered (i.e., ether host BPF filter).

Thanks!

markuskont commented 5 months ago

Done in https://github.com/StamusNetworks/gophercap/commit/fbe41dfcb5d115c13f7b8efdf2215a8428665465

mpihelgas commented 5 months ago

Thank you, I'll run some tests to provide more feedback.

First thing I noticed, there seems to be some leftover noisy debug printing on https://github.com/StamusNetworks/gophercap/blob/master/pkg/filter/condition.go#L214