Home page logo

tcpdump mailing list archives

Missing IPv6 ICMPv6 Neighbor Solicitation with promiscuous mode turned off
From: Paul Sheer <paulsheer () gmail com>
Date: Thu, 23 Feb 2012 12:20:51 -0600

Hi there,

With promiscuous mode turned off, libpcap successfully captures
ARP requests (since they are sent to hw address ff:ff:ff:ff:ff:ff).....

However I would expect the same behavior with IPv6 ICMPv6
Neighbor Solicitation requests. These requests have the
destination HW address of 33:33:xx:xx:xx:xx (a multicast
address). I.e. I would not have thought that it be necessary
to use promiscuous mode to see the Neighbor Solicitations.

Note that we are using libpcap in a long-running application and
would prefer not to use promiscuous mode.

Is this a known problem?
Does anyone know of a fix?

I am using:

  tcpdump version 3.9.4
  libpcap version 0.9.4
  Linux 2.6.18

Kind regards

This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]