[tcpdump-workers] regarding arp and rarp

2006-06-26 Thread lalani
Hi guys, I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address, Destination HW address and Destination Protocol address. Is there a direct way using pcap to get that information. Thanks a lot, zubin

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Guy Harris
On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: I am trying to disect ARP/RARP packet. Basically I am looking for this information: Operation code, Sender HW address, Sender Protocol address, Destination HW address and Destination Protocol address. Is there a direct way using pca

Re: [tcpdump-workers] pcap_loop() not returning after pcap_breakloop() until another packet arrives

2006-06-26 Thread Guy Harris
On Jun 24, 2006, at 10:50 PM, Richard Hansen wrote: I have one thread that sits in pcap_loop() and another thread that calls pcap_breakloop() when it is time to shut down. My code works well on Windows (WinPcap 3.1). Well, sort of. I suspect that pcap_breakloop() doesn't *immediately*

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Richard Hansen
Guy Harris <[EMAIL PROTECTED]> wrote: > On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: > >> I am trying to disect ARP/RARP packet. >> Basically I am looking for this information: Operation code, >> Sender HW address, Sender Protocol address, Destination HW address >> and Destination Prot

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Ian McDonald
On 6/27/06, Richard Hansen <[EMAIL PROTECTED]> wrote: Guy Harris <[EMAIL PROTECTED]> wrote: > On Jun 26, 2006, at 12:03 PM, [EMAIL PROTECTED] wrote: > >> I am trying to disect ARP/RARP packet. >> Basically I am looking for this information: Operation code, >> Sender HW address, Sender Protocol