Re: bpf or pcap :excluding locally generated packets

[José María González <chema () cs berkeley edu>]

Kifah, 

Depending on your problem, adding "not src host <your_host>" to 
the filter may work out. 

-Chema



kifah Abbad wrote:
> Hi guys,
>
> in freebsd i noticed a feature of bpf, that lets one exlude locally generated
> packets from a sniffing session using
>
> BIOCSSEESENT ioctl
>
> or setting bd_seesent = 0
>
> I noticed that on openbsd there is nothing like that (at least not mentioned in
> man bpf)
>
> Is there a way when capturing from a device? to make pcap, or whatever used for
> capturing exlude locally injected packets?(ignore them)...otherwise i would be
> running in a loop.
>
> --
> -
> This is the TCPDUMP workers list. It is archived at
> http://www.tcpdump.org/lists/workers/index.html
> To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe