Hi there,
With promiscuous mode turned off, libpcap successfully captures
ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff).
However I would expect the same behavior with IPv6 ICMPv6
Neighbor Solicitation requests. These requests have the
destination HW address of 33:33:xx:xx
32 PM, Aaron Turner wrote:
> On Thu, Feb 23, 2012 at 10:20 AM, Paul Sheer wrote:
>> Hi there,
>>
>> With promiscuous mode turned off, libpcap successfully captures
>> ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff).
>>
>> However I would e
>>
>> Paul> Would anyone consider adding this support to libpcap: i.e. a
>> Paul> new member within pcap_opt ?
>>
>> I think that it should probably just be on.
>> Principal of least surprise.
>
> Here's why PACKET_MR_ALLMULTI is currently *not* turned on:
>
>
> https://sourceforge.ne
forwarding to list
-paul
-- Forwarded message --
From: Paul Sheer
Date: Tue, Oct 30, 2012 at 7:40 PM
Subject: scan_sys_class_net bug in pcap-linux.c
To: Bill Fenner , Fulvio Risso ,
Guy Harris , Hannes Gredler , Michael
Richardson
Hi there!
I notice you guys have in
> > !strcmp(ent->d_name, "bonding_masters")) continue;
>
> No.
>
> That wires in a particular name, and when the *next* weird file gets added
> by some future kernel revision, we won't handle it, and would end up wiring
> in another name, lather, rinse, repeat.
>
> Instead, it should ignore "." and
works for me
-paul
On Mon, Dec 3, 2012 at 3:43 AM, Guy Harris wrote:
>
> [...]
>
> Well:
>
> [...]
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
separate interfaces, it seems you have to use wireshark instead.
Best wishes.
-paul
On Wed, Dec 5, 2012 at 4:46 PM, Guy Harris wrote:
>
> On Dec 3, 2012, at 10:33 AM, Paul Sheer wrote:
>
> > works for me
>
> Ok, good.
>
> Thanks for noting the "subsystem in ol
e IPv4 (0x0800), length
11:42:25.171312 00:22:54:7b:41:06,
ethertype IPv4 (0x0800), length
(where ">eth1" means "arrived at eth1", and " wrote:
>
> On Dec 5, 2012, at 2:56 PM, Paul Sheer wrote:
>
> > I would like to capture on all inter
