tcpdump mailing list archives

Re: How does packet capture interact with


From: Robert Burgess <burgess () systems cs cornell edu>
Date: Thu, 24 Sep 2009 15:40:00 -0400

As long as the destination IP address of the packets are not of the
firewall then you shouldn't need a host-based firewall to drop the
packets.

It still has to drop them, though---I think---because I don't want the
packets forwarded on until I say so.

Also, I forgot to mention that on some platforms, libpcap supports
only sniffing packets going a certain direction (in our out the
interface).  You should use that API when possible as it will improve
performance a good deal.

That's pcap_setdirection, yes?  Thanks!

Robert.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: