On Wed, Oct 30, 2002 at 12:25:41PM +0000, Nuno Branco wrote:
hello,
>
> I am working with gcc and libpcap and i already read the tutorial in
> www.tcpdump.org. I also tried looking around dsniff source code, but
> that's a little ahead of me right now, I want to do more simple stuff
> just for learning purposes.
>
> I was looking for more tutorials about how to capture the TCP/UDP/IP
> packets in ethernet, more interested in the data layer itself.
>
> Google wasn't able to give me much of interest or I inserted the wrong
> question.
>
Looks like you are doing the sniffing the right way. You mentioned that your interest
was in the data layer, that too in ethernet. libpcap does provide you with the headers
of the data layer too. I think that should suffice. Or may be I got your question
wrong. If I did, it might help if you could reframe your question.
thank you
phani
