[tcpdump-workers] virtual interface with macvlan [self-answer]

Hyun Yoo easetheworld at gmail.com
Fri Jan 29 03:41:54 EST 2016


I found the reason by myself.
Libpcap uses SIOCGIFINDEX ioctl
and according to linux_kernel/net/core/dev_ioctl.c, COLON(':') in interface
name is not supposed to be in a name for macvlan.
Anything after colon is ignored.
Capturing for eth1:2 is same as capturing eth1.
Use eth1_2 instead of eth1:2 then problem solved.
I wonder there is any document about this.


More information about the tcpdump-workers mailing list