If we take an example of: From: "Joe Random" <joe@example.com> ...would that be "Joe Random" that you want to match on?
Fixed with #include <netinet/in.h>
ipv6 + vlan
Should be fixed in [r157]. Can you give it a try?
add another encapsulation - 802.1Q-then-IPv6
First one (8100 0007 8864 1100 27c3 05d6) appears to be PPPoE inside an 802.1Q VLAN. I've added this in [r155] (untested, I don't have any pcaps with such traffic) On the LAN: - Ethernet tag 86dd is IPv6 - added in [r156] - Ethernet tag 88e1 homeplug (ethernet over powerline) protocol: https://en.avm.de/service/fritzbox/fritzbox-7360/knowledge-base/publication/show/249_Firewall-reports-attacks-on-TCP-port-80-or-14013-or-unsolicited-packets-of-type-0x88e1/ - Ethernet tag 8912 - can't figure this one...
support 0x86dd as IPv6 EtherType
support PPPoE-in-802.1Q