Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-25 Thread Michael Richardson
> "Guy" == Guy Harris writes: Guy> On Feb 23, 2012, at 7:58 PM, Paul Sheer wrote: Paul> Would anyone consider adding this support to libpcap: i.e. a Paul> new member within pcap_opt ? I think that it should probably just be on. Principal of least surpr

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Guy Harris
On Feb 23, 2012, at 7:58 PM, Paul Sheer wrote: >>> >>>Paul> Would anyone consider adding this support to libpcap: i.e. a >>>Paul> new member within pcap_opt ? >>> >>> I think that it should probably just be on. >>> Principal of least surprise. >> >> Here's why PACKET_MR_ALLMULTI is cur

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Paul Sheer
>> >>    Paul> Would anyone consider adding this support to libpcap: i.e. a >>    Paul> new member within pcap_opt ? >> >> I think that it should probably just be on. >> Principal of least surprise. > > Here's why PACKET_MR_ALLMULTI is currently *not* turned on: > >         > https://sourceforge.ne

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Guy Harris
On Feb 23, 2012, at 5:58 PM, Michael Richardson wrote: > >> "Paul" == Paul Sheer writes: >Paul> Actually I found the answer to this, as below. > >Paul> Would anyone consider adding this support to libpcap: i.e. a >Paul> new member within pcap_opt ? > > I think that it should p

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Michael Richardson
> "Paul" == Paul Sheer writes: Paul> Actually I found the answer to this, as below. Paul> Would anyone consider adding this support to libpcap: i.e. a Paul> new member within pcap_opt ? I think that it should probably just be on. Principal of least surprise. -- ] He who

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Paul Sheer
There is a need. Actually I found the answer to this, as below. Would anyone consider adding this support to libpcap: i.e. a new member within pcap_opt ? Under Linux you have to explicitly enable support for "all multicast" packets. libpcap does not have an option for this, but it can be done a

Re: [tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with

2012-02-23 Thread Aaron Turner
On Thu, Feb 23, 2012 at 10:20 AM, Paul Sheer wrote: > Hi there, > > With promiscuous mode turned off, libpcap successfully captures > ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff). > > However I would expect the same behavior with IPv6 ICMPv6 > Neighbor Solicitation reques

[tcpdump-workers] Missing IPv6 ICMPv6 Neighbor Solicitation with promiscuous mode turned off

2012-02-23 Thread Paul Sheer
Hi there, With promiscuous mode turned off, libpcap successfully captures ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff). However I would expect the same behavior with IPv6 ICMPv6 Neighbor Solicitation requests. These requests have the destination HW address of 33:33:xx:xx