bpf filter won't change the identification - it's just a go/nogo on feeding the packet into the application (in this case ntop).
-----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kenneth Porter Sent: Wednesday, June 08, 2005 12:27 PM To: [email protected] Subject: RE: [Ntop] Traffic not addressed to me --On Wednesday, June 08, 2005 6:29 AM -0500 Burton Strauss <[EMAIL PROTECTED]> wrote: > /* Run the packet filter if not using kernel filter */ > if (!handle->md.use_bpf && handle->fcode.bf_insns) { > if (bpf_filter(handle->fcode.bf_insns, bp, > packet_len, caplen) == 0) Thanks for doing all the legwork for me! I think this is where I want to look to see why I'm getting unicast traffic misidentified as broadcast, in bpf_filter. Alas, I'm still waiting for a reply to my trouble ticket about the rogue traffic. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
