Product Documentation Feedback

Feedback How to drop-packet-capture for MAC address

Product Documentation Feedback requires membership for participation - click to join

Not Planned

over 2 years ago

How to drop-packet-capture for MAC address

in https://support.sophos.com/support/s/article/KB-000036858?language=en_US please add examples about how to filter for events belonging to specific MAC address with drop-packet-capture command.

This is some times used by support but I cannot find this in any documentation. I thought this was some 'ether switch or whatever.

LHerzog

Parents

DominicRemigio over 3 years ago

Hi LHerzog, upon checking, the drop-packet-capture command does not support MAC filtering. If you have a case number, it is recommended to check it with Sophos Support and contact the engineer who handled the case. Thank you.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel

Comment

DominicRemigio over 3 years ago

Hi LHerzog, upon checking, the drop-packet-capture command does not support MAC filtering. If you have a case number, it is recommended to check it with Sophos Support and contact the engineer who handled the case. Thank you.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel

Children

LHerzog over 3 years ago in reply to DominicRemigio

Thank you for checking this. Maybe this was tcpdump not drop-packet-capture? Sorry, I don't know in which case this command has been used.

LuCar Toni wrote me a line in the forums about an other command to find dropped packets with grep the MAC

community.sophos.com/.../how-to-drop-packet-capture-interface-and-mac-address
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel