2 - However on /usr/include/net/ethernet.h there is a defined
value of: ETHER_MIN_LEN 64, this means that the minimal
length of an ethernet frame is 64 bytes, so lets count:
- 14 for ethernet header
- 20 for ip header without options
- 8 for udp
Hello tcpdump-workers,
This is my first post to the list, so be nice with a stranger, please :)
Im writing an application that uses pcap to retrieve packets with
the following configuration:
[udp] + [payload], Im using BPF filters to narrow down these udp packets
to a certain port, after
I
