Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 12:17 +0400, Evgeniy Polyakov wrote: > On Tue, Oct 09, 2007 at 09:51:25AM +0200, Joakim Tjernlund ([EMAIL > PROTECTED]) wrote: > > On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: > > > On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL > > > PROTEC

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 09:51:25AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: > On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: > > On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL > > PROTECTED]) wrote: > > > > Did you change eth_type_trans() to catch your pr

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Herbert Xu
On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund wrote: > > Just fond out something: > if I redirect my prog like so: > ./sniff > log > and press Ctrl-C after a packet has been sent to it, > it does NOT work. I don't get ANY output in my "log" file, not > even the printf("-\n") a

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: > On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL > PROTECTED]) wrote: > > > Did you change eth_type_trans() to catch your proto? > > > > > > > Just fond out something: > > if I redirect my prog like so: > > ./sniff >

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: > > Did you change eth_type_trans() to catch your proto? > > > > Just fond out something: > if I redirect my prog like so: > ./sniff > log > and press Ctrl-C after a packet has been sent to it, > it does NOT w

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 11:13 +0400, Evgeniy Polyakov wrote: > On Tue, Oct 09, 2007 at 08:08:22AM +0200, Joakim Tjernlund ([EMAIL > PROTECTED]) wrote: > > > Your program works fine here. You did run it as root, right? > > > > Yes and ETH_P_ALL is the only protocol that prints anything > > I am on

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 08:08:22AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: > > Your program works fine here. You did run it as root, right? > > Yes and ETH_P_ALL is the only protocol that prints anything > I am on 2.6.22 ETH_P_ARP works too. > > Did you try stracing it? > > Just di

RE: raw PF_PACKET protocol selection

2007-10-08 Thread Joakim Tjernlund
> -Original Message- > From: Herbert Xu [mailto:[EMAIL PROTECTED] > Sent: den 9 oktober 2007 05:17 > To: [EMAIL PROTECTED] > Cc: netdev@vger.kernel.org > Subject: Re: raw PF_PACKET protocol selection > > Joakim Tjernlund <[EMAIL PROTECTED]> wrote: > &

Re: raw PF_PACKET protocol selection

2007-10-08 Thread Herbert Xu
Joakim Tjernlund <[EMAIL PROTECTED]> wrote: > > I trying to open my own raw PF_PACKET socket to receive > pkgs sent to this socket. I can only make ETH_P_ALL protocol > work, but then I receive all pkgs and I want pkgs with a specific > protocol type. I have tried lots of ETH_P types and none of

raw PF_PACKET protocol selection

2007-10-08 Thread Joakim Tjernlund
Hi List I trying to open my own raw PF_PACKET socket to receive pkgs sent to this socket. I can only make ETH_P_ALL protocol work, but then I receive all pkgs and I want pkgs with a specific protocol type. I have tried lots of ETH_P types and none of them work. Naturally I make sure the sender is