Hi,
This is regarding the tcpdump command I am using. For snooping
the outgoing multicast packets (including the link level header ),
I giving the following options.
"tcpdump -e -x -i eth0 ether multicast"
I am not sure at what point the dump is taken, i.e, whether at
the ethernet driver (just before putting it on the wire) or at
the ip layer itself when the ethernet header is not set properly.
This is because, I see that the destination ethernet header of
the outgoing packets as 0. Since the man pages of tcpdump doesn't
clearly mention regarding the above option (whether option "ether
multicast" is only for incoming or outgoing packets), I assume
that this option should print the correct packet dump or am I
missing something? I am using linux 2.2.14
Thanks,
Srivatsan
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
