Re: Sending a packet to localhost?

[Aaron Turner <synfinatic () gmail com>]

On Mon, Feb 23, 2009 at 1:55 PM, Guy Harris <guy () alum mit edu> wrote:
> On Feb 23, 2009, at 1:29 PM, Aaron Turner wrote:
>
> > tcpdump/Wireshark will show you the Linux SLL header.
>
> ...although that's not the format of the link-layer header on packets on the
> Linux loopback interface; those packets have fake Ethernet headers.
>
> (The SLL header is synthesized by libpcap for link layers that either
>
>        1) have a link-layer header type for which there isn't (yet) a DLT_
> value;
>
>        2) don't supply a usable link-layer header (e.g., PPP, which doesn't
> provide such unimportant information as the packet type);
>
>        3) don't necessarily have *a* link-layer header (e.g., the any
> device, which can supply packets from multiple different link-layer types).)


Interesting... do you know off the top of your head if the packets
have a destination MAC or is it all zeros?


-- 
Aaron Turner
http://synfin.net/
http://tcpreplay.synfin.net/ - Pcap editing and replay tools for Unix & Windows
Those who would give up essential Liberty, to purchase a little
temporary Safety,
deserve neither Liberty nor Safety.
    -- Benjamin Franklin
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.