tcpdump mailing list archives

Re[2]: pcap setfilter question


From: Kifah Abbad <kifah () prz tu-berlin de>
Date: Wed, 3 Dec 2003 19:25:55 +0100

Hello alex,

Wednesday, December 3, 2003, 4:46:22 PM, you wrote:


am> maybe set the SIMPLEX flag on the interface?
I am not sure if this could be done on Openbsd, isn't it freeBSD
specific?






am> -alexm
am> 09:43 03/12/2003

am> On Wed, 3 Dec 2003, Kifah Abbad wrote:

Hi everyone,

i am posting this msg on openbsd misc and pcap-tcpdump, since i find
it relevant for both.

i have a little pcap capturing programm, that captures all ethernet-packets on
internal interface (fxp1) of my openbsd 3.4 machine, mangles tem, then
injects them back with libnet into interface fxp1 again.
But it also then captures again the packets "modified" of me , which
gets the programm in an unending cycle (catpure once.inject-capture
again-inject...etc).

now since the packets are ethernet  packets, i can simply inject them
into the ip stack of system.or into a psydo dvice.That is why i am injecting on fxp1.

so how can i get out of this delimma? with a proper pcacp_setfiler?

am> -
am> This is the TCPDUMP workers list. It is archived at
am> http://www.tcpdump.org/lists/workers/index.html
am> To unsubscribe use
am> mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe



-- 
Best regards,
 Kifah                            mailto:kifah () prz tu-berlin de

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: