https://bugzilla.redhat.com/show_bug.cgi?id=498981#c4
https://serverfault.com/questions/544651/vlan-tags-not-shown-in-packet-capture-linux-via-tcpdump
如果不加-e参数,抓取不到 vlan信息,会导致wireshark解析出现问题。因为,抓到的二层认为上层是vlan协议,但是协议数据没抓到,导致解析出现错误,如果这样的话只能强制将0x8100解码为IPv4协议 。如下图,
但是如果但看 tcpdump的手册里的说明,根本就看不到这一点。所以需要更新这个document?
-e
Print the link-level header on each dump line. This can be used, for example, to print MAC layer addresses for protocols such as Ethernet and IEEE 802.11.