https://ufile.io/l9xqze2v wireshark.pcap
iptables.sh https://ufile.io/v9hsadna
Look at my iptables which config will drop traffic in wireshark
How to configure promiscous and understand which traffic is inbound of wireshark or inbound at all?
To determine inbound traffic you should disable promiscuous mode as that allows traffic that wouldn't normally be accepted by the interface to be processed. This is done from the Capture Options dialog.
To determine inbound traffic, set a display filter to only show traffic with a destination of your interface(s) MAC addresses(es), e.g.
eth.dst == 00:11:22:33:44:55
substituting the appropriate value for your NIC MAC.
How to understand how much invisible interfaces in physical level !?
And how much linux network interfaces in standart mode ?
Whear i can download pcap on arp protocol and how much protocols working behind linux iptables drop all script without arp?
And how to understand is this promiscuous traffic is dropped which goes through interface and wireshark ?
Comments