10-20-2017, 02:42 PM
Regarding winxp's question about ignoring clients that were previously captured, would it make sense to add the mac adddy's of those to a bpf and use -F to filter them out in later runs? I'm wondering if there's a sanity threshold on how many entries can be processed by the filter before it becomes a problem. dozens of rules? hundreds? thousands?