Hi Bill,
I appreciate your ideas. I am the root of the system. As you say, it is not
possible to catch packets simultaneously on more than one interface or all interfaces.
But there are tools like tcpdump. tcpdump with -i option of 'any' can catch packets
on all interfaces. Even the Pcap library in C supports 'any' value for dev paramater
for open_live method. I am guessing why Net::Pcap library doesn't provide option of
'any' for open_live method. I thought Net::PCap is exact equivalent to Pcap library.
As you say, one of the ways I could solve this problem is to catch packets
separately from 2 interfaces and then merge the files by timestamp values in to a
single value. Is there any other way?
Thanks,
Balaji
WC -Sx- Jones <[EMAIL PROTECTED]> wrote:
Balaji Thoguluva wrote:
> Hi,
> I would like to know if
>
> Net::Pcap::open_live($dev, $snaplen, $promisc, $to_ms, \$err))
>
> method can take 'any' as value for $dev argument. My intention
> is to catch packets that come on all network interfaces of a computer
>(atleast I want from eth0 and lo, loopback interface). I have also tried
>$promisc = 1. It doesn't seem to catch packets on all interface. I would
> appreciate your ideas.
>
> Thanks,
> Balaji
two possible issues -
One, you must be root on most systems to see raw packets or to evenplace
the interface into promiscuous mode.
Two, you can only look at one interface at a time.
But, yes, the $dev param can be set to any correct interface. As far as
the detail of packets - how do you set the verbose-ness of the interface?
-Bill-
__Sx__________________________________________
http://youve-reached-the.endoftheinternet.org/
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Yahoo! India Insurance Special: Be informed on the best policies, services, tools and
more.
