[Ebtables-user] ebtables - filter bpdutcn/bpdutcn-ack

[elektrokat <ele...@pr...>]

I'm not finding a lot of verbage for ebtables and have a super newb question on its use. i'm experimenting with the prevention of an stp attack. I really hope you don't mind....

I am running a debain VM in bridge mode and want to inspect the STP bpdu frames tcn/tcn ack and forward/ignore anything else.

I have this:
ebtables -p LENGTH -d BGA --stp-type 1,128 -j FORWARD