Diego Mascheroni wrote:
> >Change the socket type to SOCK_RAW, there is no longer a SOCK_PACKET.
> [...]
>
> Is there a thread on linux-c-programming about capturing data from a
> network device, the same thing that tcpdump or a normal sniffer do.
This was quite a while ago.
> We was talking about to do it using SOCK_PACKET, but I told that
> SOCK_PACKET is obsolete (as I read in your email and as the kernel warn as
> well), and I asked how to use SOCK_RAW to replace SOCK_PACKET but nobody
> know this.
I recall someone pointing out that you have to specify a protocol for
SOCK_RAW. If you wish to capture multiple protocols, I think that you
have to bind multiple sockets, one for each protocol.
--
Glynn Clements <[EMAIL PROTECTED]>
