RE: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
-Original Message- From: Herbert Xu [mailto:[EMAIL PROTECTED] Sent: den 9 oktober 2007 05:17 To: [EMAIL PROTECTED] Cc: netdev@vger.kernel.org Subject: Re: raw PF_PACKET protocol selection Joakim Tjernlund [EMAIL PROTECTED] wrote: I trying to open my own raw PF_PACKET

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 08:08:22AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: Your program works fine here. You did run it as root, right? Yes and ETH_P_ALL is the only protocol that prints anything I am on 2.6.22 ETH_P_ARP works too. Did you try stracing it? Just did and

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 11:13 +0400, Evgeniy Polyakov wrote: On Tue, Oct 09, 2007 at 08:08:22AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: Your program works fine here. You did run it as root, right? Yes and ETH_P_ALL is the only protocol that prints anything I am on 2.6.22

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: Did you change eth_type_trans() to catch your proto? Just fond out something: if I redirect my prog like so: ./sniff log and press Ctrl-C after a packet has been sent to it, it does NOT work. I

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: Did you change eth_type_trans() to catch your proto? Just fond out something: if I redirect my prog like so: ./sniff log and press

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Herbert Xu
On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund wrote: Just fond out something: if I redirect my prog like so: ./sniff log and press Ctrl-C after a packet has been sent to it, it does NOT work. I don't get ANY output in my log file, not even the printf(-\n) appears.

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Evgeniy Polyakov
On Tue, Oct 09, 2007 at 09:51:25AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: Did you change eth_type_trans() to catch your proto?

Re: raw PF_PACKET protocol selection

2007-10-09 Thread Joakim Tjernlund
On Tue, 2007-10-09 at 12:17 +0400, Evgeniy Polyakov wrote: On Tue, Oct 09, 2007 at 09:51:25AM +0200, Joakim Tjernlund ([EMAIL PROTECTED]) wrote: On Tue, 2007-10-09 at 11:34 +0400, Evgeniy Polyakov wrote: On Tue, Oct 09, 2007 at 09:27:38AM +0200, Joakim Tjernlund ([EMAIL PROTECTED])

Re: raw PF_PACKET protocol selection

2007-10-08 Thread Herbert Xu
Joakim Tjernlund [EMAIL PROTECTED] wrote: I trying to open my own raw PF_PACKET socket to receive pkgs sent to this socket. I can only make ETH_P_ALL protocol work, but then I receive all pkgs and I want pkgs with a specific protocol type. I have tried lots of ETH_P types and none of them