Re: [tcpdump-workers] mac addr of the destination in linux cooked

2011-04-26 Thread Ankith Agarwal
On Wed, Apr 27, 2011, Guy Harris said: > For each of the *LAN* interfaces of the system. Not all interfaces, on all > systems, *have* MAC addresses. You might have a PPP interface, for example. > > What exactly is your program trying to do? It might make sense to open a > PF_PACKET socket y

Re: [tcpdump-workers] mac addr of the destination in linux cooked

2011-04-26 Thread Ankith Agarwal
ple instances of pcap uses a lot of cpu power) Regards Ankith On Tue, Apr 26, 2011, Guy Harris said: > > On Apr 26, 2011, at 3:45 AM, Ankith Agarwal wrote: > >> I am trying to capture incoming packets in all the interfaces using >> pcap. I just wanted to know if there

[tcpdump-workers] mac addr of the destination in linux cooked capture

2011-04-26 Thread Ankith Agarwal
Hi I am trying to capture incoming packets in all the interfaces using pcap. I just wanted to know if there is a way of finding the interface(mac address or name) from which the packet has arrived?? (As I am using the "any" interface, I am getting the linux cooked capture header in the p

[tcpdump-workers] obtaining the interface name

2010-12-02 Thread Ankith Agarwal
Hi I have given the device name as NULL and pcap is working fine in calling the callback function from pcap_loop function, for all the packets received. Can the interface name be obtained in this callback function?? Regards Ankith -- This message has been scanned for viruses and dangerous co

Re: [tcpdump-workers] fragmented ip packets

2010-11-23 Thread Ankith Agarwal
On Tue, Nov 23, 2010, Guy Harris said: > > On Nov 23, 2010, at 12:51 AM, Ankith Agarwal wrote: > >> I am trying to filter all the SIP packets using pcap filter on ports of >> 5060 and 5061. But, some of the SIP packets are fragmented in the IP layer >> because of t

[tcpdump-workers] fragmented ip packets

2010-11-23 Thread Ankith Agarwal
Hi I am trying to filter all the SIP packets using pcap filter on ports of 5060 and 5061. But, some of the SIP packets are fragmented in the IP layer because of their size (greater than MTU). I wanted to know whether the pcap_loop api gives these packets by combinig it, or it just gives the last

[tcpdump-workers] sip/sdp filters

2010-11-10 Thread Ankith Agarwal
Hi I am trying to develop a test tool for remotely monitoring all the streams of a device. Is there any direct way of doing it? I would also like to know if there is any SIP/SDP filter in pcap and also a dissector for the same. Regards Ankith -- This message has been scanned for viruses and d

Re: [tcpdump-workers] remote capturing using tcpdump

2010-10-08 Thread Ankith Agarwal
On Thu, Oct 7, 2010, Richard Huddleston said: > Like many people here, i've used tcpdump (or libpcap) to write data > acquisition gadgets that then report up to some higher tier. > > If you wanted to build one without doing all the messy libpcap and socket > calls, you could chain tcpdump, a

Re: [tcpdump-workers] remote capturing using tcpdump

2010-10-06 Thread Ankith Agarwal
On Wed, Oct 6, 2010, Aaron Turner said: > On Wed, Oct 6, 2010 at 6:19 AM, Ankith Agarwal wrote: >> >> Hi >> �Is there any solution for reporting the captured packets to a remote >> user through the same or another interface. Actually I need to remotely >>

[tcpdump-workers] remote capturing using tcpdump

2010-10-06 Thread Ankith Agarwal
Hi Is there any solution for reporting the captured packets to a remote user through the same or another interface. Actually I need to remotely monitor a machines' incoming and outgoing packets. Regards Ankith -- This message has been scanned for viruses and dangerous content by MailScanner,