Re: How does packet capture interact with

[Tillmann Werner <werner () cs uni-bonn de>]

Hi Robert,

you somehow have to make sure that the kernel doesn't deal with packets
you want to take care of. If you don't, it will reset TCP connections
and reply with ICMP port unreachable messages to UDP datagrams etc. I
don't think there is a portable way to do this. Linux supports hooking
its TCP/IP stack via the netfilter framework, but that's OS specific.

Correct me if I am wrong.

Tillmann
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.