> I'm not sure which component should report what, but the old libpcap code
> does,
The only reason it does so is that it's the only way to put the device
to which a SOCK_PACKET socket is bound into promiscuous mode.
The right way to do it on a PF_PACKET socket, which is what libpcap,
quite properly, prefers to use, is not with SIOCSIFFLAGS; for better or
worse, that means that the "global" IFF_PROMISC flag doesn't get set,
and "ifconfig" doesn't report PROMISC mode. So it goes; people who
don't like that should complain to the Linux networking folk about it.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
