Hi there, With promiscuous mode turned off, libpcap successfully captures ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff).....
However I would expect the same behavior with IPv6 ICMPv6 Neighbor Solicitation requests. These requests have the destination HW address of 33:33:xx:xx:xx:xx (a multicast address). I.e. I would not have thought that it be necessary to use promiscuous mode to see the Neighbor Solicitations. Note that we are using libpcap in a long-running application and would prefer not to use promiscuous mode. Is this a known problem? Does anyone know of a fix? I am using: tcpdump version 3.9.4 libpcap version 0.9.4 Linux 2.6.18 Kind regards -paul - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
