Re: PCAP: Distinguishing packets based on different senders ?

["Aaron Turner" <synfinatic () gmail com>]

No, the pcap header won't have that.  However, the packet data itself
(which libpcap will give you) will have that (MAC address, IP address,
etc) which will tell you the sender/reciever's address.  It all
depends on how you want to differentiate hosts (MAC address may not be
unique if you have hosts on the other side of a router for example).

--
Aaron Turner
http://synfin.net/

On 3/21/06, J S <geekreader () gmail com> wrote:
[snip]
> Does pcap header contains information about sender/reciever or is it
> possible to parse the header to get this info?
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.