How about trying each of eth0, all, any until hopefully one succeeds. Roger
On Thu, Mar 14, 2013 at 10:09 PM, Alan Robertson <[email protected]> wrote: > On 03/14/2013 03:52 PM, Alan Robertson wrote: > > > > On 03/14/2013 12:25 PM, Roger Massey wrote: > >> I wanted to update progress on this. > >> > >> pcap_create("any", errb); > >> pcap_create("all", errb); > >> > >> both succeed. If "all" works for linux then we would seem to be done. > > "all" doesn't work on my version of Linux. "any" seems to (at least > > with tcpdump). > But not with my code... Here's the message: > > ** (process:30757): WARNING **: pcap_compile of [(ether proto 0x88cc and > ether dst 01:80:c2:00:00:0e) or (ether proto 0x2000 and ether dst > 01:00:0c:cc:cc:cc)] failed: [ethernet addresses supported only on > ethernet/FDDI/token ring/802.11/ATM LANE/Fibre Channel] > > I think I may have seen that message before... Sigh... > > I might be able to express it in terms of offsets into the packets and > make that go away, but that's more complicated - so for the moment, I'm > going to revert my change :-(. > > > -- > Alan Robertson <[email protected]> - @OSSAlanR > > "Openness is the foundation and preservative of friendship... Let me > claim from you at all times your undisguised opinions." - William > Wilberforce > _______________________________________________ > Assimilation mailing list - Discovery-Driven Monitoring > [email protected] > http://lists.community.tummy.com/cgi-bin/mailman/listinfo/assimilation > http://assimmon.org/ >
_______________________________________________ Assimilation mailing list - Discovery-Driven Monitoring [email protected] http://lists.community.tummy.com/cgi-bin/mailman/listinfo/assimilation http://assimmon.org/
