search for: skb_mac_header

...to you load offsets in the K constant. It would require to use something like bpf_asm to write your filters by hand. F.e. if you look at bpf_internal_load_pointer_neg_helper() helper function in the kernel, they check for SKF_NET_OFF/SKF_LL_OFF and then use K relative to skb_network_header(skb) or skb_mac_header(skb), respectively. This should resolve your use-case. The problem is that with libpcap, the filters are generated for tcpdump specifically, and tcpdump doesn't need to care about SKF_NET_OFF/SKF_LL_OFF as it sees raw packet starting with Ethernet header. So, reusing libpcap is a bit suboptima...

This is based on an earlier patch from Eric Biederman adding forwarding between macvlans. I extended his approach to allow the administrator to choose the mode for each macvlan, and to implement a functional VEPA between macvlan. Still missing from this is support for communication between the lower device that the macvlans are based on. This would be extremely useful but as others have found out

This is based on an earlier patch from Eric Biederman adding forwarding between macvlans. I extended his approach to allow the administrator to choose the mode for each macvlan, and to implement a functional VEPA between macvlan. Still missing from this is support for communication between the lower device that the macvlans are based on. This would be extremely useful but as others have found out

This is based on an earlier patch from Eric Biederman adding forwarding between macvlans. I extended his approach to allow the administrator to choose the mode for each macvlan, and to implement a functional VEPA between macvlan. Still missing from this is support for communication between the lower device that the macvlans are based on. This would be extremely useful but as others have found out