Date: Mon, 5 Feb 2007 04:27:22 +0200 From: Giorgos Keramidas <keramida@ceid.upatras.gr> To: nocturnal <nocturnal@swehack.se> Cc: freebsd-questions@freebsd.org Subject: Re: packet destination from pcap Message-ID: <20070205022721.GA24354@kobe.laptop> In-Reply-To: <45C630FD.3080801@swehack.se> References: <45C630FD.3080801@swehack.se>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2007-02-04 20:16, nocturnal <nocturnal@swehack.se> wrote: > Hi > I'm sniffing packets with pcap but i need information about where the > packet is going. This is a decision made by the routing table, so there's no good way to 'guess' where it will go before the packet reaches the outgoing queue of the IP layer. > I'm thinking i need to open two pcap sessions with two different > filters because the application i'm writing has a need for > distinguishing between packets going to a specified ip-address and > those going from it. Well, the destination IP address should be easy to grab. Even if you do get hold of that though, you may have to listen to multiple pcap connections to find out where the routing decisions send the packet on its way out.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070205022721.GA24354>