On Apr 26, 2011, at 3:45 AM, Ankith Agarwal wrote:
> I am trying to capture incoming packets in all the interfaces using
> pcap. I just wanted to know if there is a way of finding the interface(mac
> address or name) from which the packet has arrived??
>
> (As I am using the "any" interface, I am getting the linux cooked
> capture header in the packet and this header only contains the source mac
> address, but I wanted to know the destination mac address
Then you can't use the "any" interface, because, for a PF_PACKET/SOCK_DGRAM
socket, which is what is used for the "any" interface, that information is not
supplied - that's why the header for DLT_LINUX_SLL packets:
http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html
doesn't contain the destination address.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
