[tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Chris Morgan
I'm working on a pcap/winpcap c# library, SharpPcap. I was wondering what the best way to get a devices mac address was, preferrably in a manner that would work in both pcap and with winpcap. So far I've seen code that captures packets on the interface and looks in them for the mac address, I've al

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Chris" == Chris Morgan writes: Chris> I'm working on a pcap/winpcap c# library, SharpPcap. I was Chris> wondering what the best way to get a devices mac address was, Chris> preferrably in a manner that would work in both pcap and w

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Chris Morgan
On Tue, Mar 3, 2009 at 8:49 PM, Michael Richardson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > >> "Chris" == Chris Morgan writes: >    Chris> I'm working on a pcap/winpcap c# library, SharpPcap. I was >    Chris> wondering what the best way to get a devices mac address was, >

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Guy Harris
On Mar 3, 2009, at 6:44 PM, Chris Morgan wrote: I would be looking for the local adapter mac addresses. Under linux with pcap and the adapters I have, ethernet and wireless, I see hardware mac addresses in pcap_if_t.addresses. I wasn't sure if there were any known cases where pcap_if_t.address

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Chris Morgan
On Tue, Mar 3, 2009 at 9:54 PM, Guy Harris wrote: > > On Mar 3, 2009, at 6:44 PM, Chris Morgan wrote: > >> I would be looking for the local adapter mac addresses.  Under linux >> with pcap and the adapters I have, ethernet and wireless, I see >> hardware mac addresses in pcap_if_t.addresses. I was

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-03 Thread Guy Harris
On Mar 3, 2009, at 7:33 PM, Chris Morgan wrote: Right. I had to look at the sa_family value to differentiate the two under linux but I don't believe windows even has the same values for sa_family. The numerical values don't matter *if* you have the same #defined AF_ name for the family in w

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-04 Thread Gianluca Varenni
- Original Message - From: "Chris Morgan" To: Sent: Tuesday, March 03, 2009 7:33 PM Subject: Re: [tcpdump-workers] Hardware mac address with pcap/winpcap ... Is the development of pcap such that such a feature might be present in the next several months? Even something

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-04 Thread Guy Harris
On Mar 4, 2009, at 9:19 AM, Gianluca Varenni wrote: In the case of Windows/WinPcap, we have an internal Packet API to get the MAC address, the main problem is exposing such MAC address at the pcap API level. I actually didn't know that findalldevs was returning the MAC address on (some fla

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-04 Thread Chris Morgan
On Wed, Mar 4, 2009 at 1:21 PM, Guy Harris wrote: > > On Mar 4, 2009, at 9:19 AM, Gianluca Varenni wrote: > >> In the case of Windows/WinPcap, we have an internal Packet API to get the >> MAC address, the main problem is exposing such MAC address at the pcap API >> level. I actually didn't know th

Re: [tcpdump-workers] Hardware mac address with pcap/winpcap

2009-03-04 Thread Gianluca Varenni
I checked, and none of them (AF_LINK, PF_PACKET, sockaddr_ll) is defined in the windows include files. Same for the Cygwin include files. GV - Original Message - From: "Guy Harris" To: Sent: Wednesday, March 04, 2009 10:21 AM Subject: Re: [tcpdump-workers] Hardware mac ad