tcpdump mailing list archives

Re: How to use the non-promiscous mode?


From: rick jones <rick.jones2 () hp com>
Date: Thu, 9 Sep 2004 08:03:47 -0700

 The following code is used in my program.

pcap_open(d->name, 65536, 0, 1000, NULL, errbuf)


 I Thought I am using the non-promiscous mode in my program. But,
unexpected packet was captured.

Likely as not, when in "non promiscuous mode" (DL_PROMISC_SAP in DLPIspeak) you will still see all link-level broadcast traffic - basically, any traffic that the NIC would have passed along to the driver. That can give you packets that you might not have initially expected.

rick jones
there is no rest for the wicked, yet the virtuous have no pillows

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: