tcpdump mailing list archives
Re: PCAP: Distinguishing packets based on different senders ?
From: "Aaron Turner" <synfinatic () gmail com>
Date: Tue, 21 Mar 2006 15:19:40 -0800
No, the pcap header won't have that. However, the packet data itself (which libpcap will give you) will have that (MAC address, IP address, etc) which will tell you the sender/reciever's address. It all depends on how you want to differentiate hosts (MAC address may not be unique if you have hosts on the other side of a router for example). -- Aaron Turner http://synfin.net/ On 3/21/06, J S <geekreader () gmail com> wrote: [snip]
Does pcap header contains information about sender/reciever or is it possible to parse the header to get this info?
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- PCAP: Distinguishing packets based on different senders ? J S (Mar 21)
- Re: PCAP: Distinguishing packets based on different senders ? Aaron Turner (Mar 21)
- Re: PCAP: Distinguishing packets based on different senders ? Guy Harris (Mar 21)