Re: [tcpdump-workers] mac addr of the destination in linux cooked

2011-04-26 Thread Ankith Agarwal
On Wed, Apr 27, 2011, Guy Harris said: > For each of the *LAN* interfaces of the system. Not all interfaces, on all > systems, *have* MAC addresses. You might have a PPP interface, for example. > > What exactly is your program trying to do? It might make sense to open a > PF_PACKET socket y

Re: [tcpdump-workers] mac addr of the destination in linux cooked

2011-04-26 Thread Guy Harris
On Apr 26, 2011, at 8:48 PM, Ankith Agarwal wrote: > Thanks for the reply. One more thing, if I am particular in getting the > destination mac address, then is it better to run a pcap instance for each > of the interfaces of the system?? For each of the *LAN* interfaces of the system. Not all

Re: [tcpdump-workers] mac addr of the destination in linux cooked

2011-04-26 Thread Ankith Agarwal
Hi Thanks for the reply. One more thing, if I am particular in getting the destination mac address, then is it better to run a pcap instance for each of the interfaces of the system?? -> if yes, then is there a way to optimize multiple instances of pcap??(because I have tried it, and multiple in

Re: [tcpdump-workers] mac addr of the destination in linux cooked capture

2011-04-26 Thread Guy Harris
On Apr 26, 2011, at 3:45 AM, Ankith Agarwal wrote: > I am trying to capture incoming packets in all the interfaces using > pcap. I just wanted to know if there is a way of finding the interface(mac > address or name) from which the packet has arrived?? > >(As I am using the "any" interf

[tcpdump-workers] mac addr of the destination in linux cooked capture

2011-04-26 Thread Ankith Agarwal
Hi I am trying to capture incoming packets in all the interfaces using pcap. I just wanted to know if there is a way of finding the interface(mac address or name) from which the packet has arrived?? (As I am using the "any" interface, I am getting the linux cooked capture header in the p