Hi. I want to capture packets from my router (RT-AC1200G+) using tcpdump.
The router has a bridge interface (br0). So, I thought I could capture packets through that interface because I confirmed in brctl that eth1, eth2, and vlan0 interfaces are added to the br0 interface.
However, when I check the captured packets, I only see outgoing packets and internal packets (packets from the same network). Any inbound packets are missing. For example, in the TCP three-way handshake, I can see the SYN and ACK packets, but I can't see the SYN&ACK packet from the server.
When I capture packets from separate interfaces like eth1 and eth2, every packet is captured correctly. However, I want to capture packets from all interfaces at the same time using the br0 interface. Is there any solution to solve this problem?
The router has a bridge interface (br0). So, I thought I could capture packets through that interface because I confirmed in brctl that eth1, eth2, and vlan0 interfaces are added to the br0 interface.
However, when I check the captured packets, I only see outgoing packets and internal packets (packets from the same network). Any inbound packets are missing. For example, in the TCP three-way handshake, I can see the SYN and ACK packets, but I can't see the SYN&ACK packet from the server.
When I capture packets from separate interfaces like eth1 and eth2, every packet is captured correctly. However, I want to capture packets from all interfaces at the same time using the br0 interface. Is there any solution to solve this problem?
