Re: [tcpdump-workers] deduct local IP address from cap-file

2010-05-03 Thread Gert Doering
Hi, On Fri, Apr 30, 2010 at 02:38:59PM -0700, Guy Harris wrote: > if they're received by that host, and the destination address isn't a > broadcast or multicast address, see what the destination address is; ... and to nitpick: if "that host" is not a router and is just forwarding this pack

Re: [tcpdump-workers] deduct local IP address from cap-file

2010-04-30 Thread Guy Harris
On Apr 30, 2010, at 12:14 AM, Andrej van der Zee wrote: > Is it by any means possible to deduct the local IP address from a > cap-file? With local I mean the IP address that is physically bound to > the machine where tcpdump is ran. If you mean "deduce" - i.e., given a capture file, determine wh

[tcpdump-workers] deduct local IP address from cap-file

2010-04-30 Thread Andrej van der Zee
Hi, Is it by any means possible to deduct the local IP address from a cap-file? With local I mean the IP address that is physically bound to the machine where tcpdump is ran. Thank you, Andrej - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.