https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162017-02-23T11:31:59ZpfSense bugtrackerpfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=317732017-02-23T11:31:59ZRenato Botelhorenato@netgate.com
<ul><li><strong>Assignee</strong> set to <i>Renato Botelho</i></li><li><strong>Target version</strong> set to <i>2.4.1</i></li></ul> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=317762017-02-23T11:46:31ZJim Pingle
<ul></ul><p>This is already partially done, <a class="changeset" title="Allow capturing based on MAC address as well." href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a">151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a</a></p>
<p>Though the calls to is_macaddr() could be changed to pass true for the second parameter to allow partial MAC matching that would take a bit more work crafting the tcpdump command as noted above.</p> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=317782017-02-23T12:28:22ZClinton Cory
<ul></ul><p>Jim Pingle wrote:</p>
<blockquote>
<p>This is already partially done, <a class="changeset" title="Allow capturing based on MAC address as well." href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a">151b4e35eead8d1b1a9ccd1d1c3b3c4fb0e6620a</a></p>
<p>Though the calls to is_macaddr() could be changed to pass true for the second parameter to allow partial MAC matching that would take a bit more work crafting the tcpdump command as noted above.</p>
</blockquote>
<p>The text under the "Host Address" field needs to be updated as well.</p> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=318442017-02-28T11:33:12ZJim Pingle
<ul><li><strong>Assignee</strong> changed from <i>Renato Botelho</i> to <i>Jim Pingle</i></li><li><strong>Target version</strong> changed from <i>2.4.1</i> to <i>2.4.0</i></li></ul><p>I'll take this, it wasn't too difficult to implement, I've got a working set of changes to push.</p> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=318452017-02-28T11:40:06ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>Applied in changeset <a class="changeset" title="Finish MAC address matching for packet capture. Implements #6743" href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/6aa85955fc074d9d35de782c32f7363391b945df">6aa85955fc074d9d35de782c32f7363391b945df</a>.</p> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=318972017-03-02T09:27:35ZJohn Murphy
<ul></ul><p>An initial packet capture was taken over the LAN interface to capture a sample of active MAC addresses on the network. After obtaining several MAC addresses to use while testing the filter, different packet captures were ran limiting to various 1, 2, and 4 octets. Analysis of these various packet captures had the expected MAC addresses contained in the capture files.</p>
<p>Testing environment:</p>
<ul>
<li> SG-2220 w/ 2.4.0.b.20170301.1546</li>
<li> Wireshark for analysis of downloaded capture files.</li>
</ul> pfSense - Feature #6743: Packet Capture - Filter MAChttps://redmine.pfsense.org/issues/6743?journal_id=319052017-03-02T09:55:02ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul><p>Confirmed on a snapshot here, too. Thanks for testing!</p>