On Mon, Jun 22, 2009 at 11:06 PM, Lakshmana Reddy
wrote:
> Aaron,
>
> Thanks for the pointer..
> I did further investigation and figured that the PF_PACKET socket does not
> capture the Rx packets , it always captures the Rx packets..
> I did a try a small socket program to sniff the packets belo
Aaron,
Thanks for the pointer..
I did further investigation and figured that the PF_PACKET socket does not
capture the Rx packets , it always captures the Rx packets..
I did a try a small socket program to sniff the packets below is the code
snippet..
-
...
if ( (sock=socket
On Jun 18, 2009, at 11:30 PM, Lakshmana Reddy wrote:
I walked through the tcpdump/pcap code to see what going on.. so far
my
understanding is that the pcap_loop(), to capture the packets on the
given
device invokes the recvfrom() sys call to get the raw packets from the
kernel and parses th
On Thu, Jun 18, 2009 at 11:30 PM, Lakshmana
Reddy wrote:
[snip]
> I walked through the tcpdump/pcap code to see what going on.. so far my
> understanding is that the pcap_loop(), to capture the packets on the given
> device invokes the recvfrom() sys call to get the raw packets from the
> kernel
Hi,
I'm new to tcpdump, so please bear with any obvious questions.
I am trying to capture packets on bonding interface "veth0" in Linux 2.6.23.
I could capture the packets on both the direction on "veth0"
(virtual/bonded) interface but at the physical interface under this bonded
interface ONLY tr
