[tcpdump-workers] regarding arp and rarp

2006-06-26 Thread lalani
Hi guys, I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address, Destination HW address and Destination Protocol address. Is there a direct way using pcap to get that information. Thanks a lot,

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Guy Harris
On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address, Destination HW address and Destination Protocol address. Is there a direct way using

Re: [tcpdump-workers] pcap_loop() not returning after pcap_breakloop() until another packet arrives

2006-06-26 Thread Guy Harris
On Jun 24, 2006, at 10:50 PM, Richard Hansen wrote: I have one thread that sits in pcap_loop() and another thread that calls pcap_breakloop() when it is time to shut down. My code works well on Windows (WinPcap 3.1). Well, sort of. I suspect that pcap_breakloop() doesn't *immediately*

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Richard Hansen
Guy Harris [EMAIL PROTECTED] wrote: On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address, Destination HW address and Destination Protocol

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Ian McDonald
On 6/27/06, Richard Hansen [EMAIL PROTECTED] wrote: Guy Harris [EMAIL PROTECTED] wrote: On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address,