Tcpdump/Iptables on bridge interface without assigned IP address
If you can ping, there is traffic in your bridged interface. You can watch the traffic using the appropriate options of tcpdump
:
tcpdump -elnXXi br0
In the same way, you can totally filter this traffic using iptables
, taking into account that it will only operate to the IP layer. You would need ebtables
if you need to filter traffic on layer 2 (Ethernet)