Kifah, 

Depending on your problem, adding "not src host <your_host>" to 
the filter may work out. 

-Chema



kifah Abbad wrote:
> 
> Hi guys,
> 
> in freebsd i noticed a feature of bpf, that lets one exlude locally generated
> packets from a sniffing session using
> 
> BIOCSSEESENT ioctl
> 
> or setting bd_seesent = 0
> 
> I noticed that on openbsd there is nothing like that (at least not mentioned in
> man bpf)
> 
> Is there a way when capturing from a device? to make pcap, or whatever used for
> capturing exlude locally injected packets?(ignore them)...otherwise i would be
> running in a loop.
> 
> --
> -
> This is the TCPDUMP workers list. It is archived at
> http://www.tcpdump.org/lists/workers/index.html
> To unsubscribe use mailto:[EMAIL PROTECTED]
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]

Reply via email to