Re: mac addr of the destination in linux cooked

[Guy Harris <guy () alum mit edu>]

On Apr 26, 2011, at 8:48 PM, Ankith Agarwal wrote:

>  Thanks for the reply. One more thing, if I am particular in getting the
> destination mac address, then is it better to run a pcap instance for each
> of the interfaces of the system??

For each of the *LAN* interfaces of the system.  Not all interfaces, on all systems, *have* MAC addresses.  You might 
have a PPP interface, for example.

What exactly is your program trying to do?  It might make sense to open a PF_PACKET socket yourself, and get the 
interface index from the sockaddr_ll filled in by recvfrom()

        http://www.kernel.org/doc/man-pages/online/pages/man7/packet.7.html

or supplied in the ring buffer with the memory-mapped interface.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.