added additional information about BPF code filtering
@@ -8461,8 +8461,10 @@ fprintf(stdout, "%s %s (C) %s ZeroBeat\n"
" where addr3 protect ACCESS POINTs and addr2 protect CLIENTs\n"
" recommended to protect own devices\n"
" or create BPF to attack a MAC\n"
- " $ tcpdump -i <interface> wlan addr1 11:22:33:44:55:66 or wlan addr2 11:22:33:44:55:66 or wlan addr3 -ddd > attack.bpf\n"
+ " $ tcpdump -i <interface> wlan addr1 11:22:33:44:55:66 or wlan addr2 11:22:33:44:55:66 or wlan addr3 11:22:33:44:55:66 -ddd > attack.bpf\n"
" it is strongly recommended to allow all PROBEREQUEST frames (wlan_type mgt && wlan_subtype probe-req)\n"
+ " or undirected frames\n"
+ " $ tcpdump -i <interface> wlan addr1 11:22:33:44:55:66 or wlan addr2 11:22:33:44:55:66 or wlan addr3 11:22:33:44:55:66 or wlan addr1 ff:ff:ff:ff:ff:ff -ddd > attack.bpf\n"
" see man pcap-filter for a list of all filter options\n"
" to use the BPF code\n"
" $ hcxdumptool -i <interface> --bpfc=attack.bpf ...\n"
