LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-26-2004, 09:51 AM   #1
masood_gandhi
LQ Newbie
 
Registered: Oct 2004
Location: India
Distribution: Redhat 9
Posts: 8

Rep: Reputation: 0
Angry lot of problems in capturing packet in promisc mode


Hi everybody,
I m using libpcap for packet caturing. But cant capture packet in inpromisc mode. The same programs works at its best in one pc and on other it dosent. I have installed latest driver for ethernet card. What may be the other problem???

Last edited by masood_gandhi; 10-26-2004 at 10:47 AM.
 
Old 11-26-2004, 03:09 AM   #2
jbmukund
LQ Newbie
 
Registered: Jul 2004
Location: hyderabad
Distribution: redhat
Posts: 5

Rep: Reputation: 0
where do packet capturing drivers come into picture?

Hello all,

I am studying & planning to implement the packet capture drivers.
where can i find the linux kernel network driver architetcture?

According what info I gathered from the net and other sources, I visualize it as follows:-

When interested in specific traffic i.e. to sniff on port 23 (telnet) in search of passwords or perhaps we want to highjack a file being sent over port 21 (FTP), whatever the case, rarely do we just want to blindly sniff all network traffic. Then we enter pcap_compile() and pcap_setfilter().

First, pcap's filter is more efficient, because it does it directly with the BPF filter.

So, I imagine the calls to pcap_compile() and pcap_setfilter() functions will invoke the packet capture driver.

Am I right? How & where do I get the Architecture of the packet capture driver & where exactly it fits?

Do guide me with the right maillists or site address.

Thanks for the help in advance.

Regards,
Mukund jampala
 
Old 11-26-2004, 09:53 AM   #3
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
Re: lot of problems in capturing packet in promisc mode

Quote:
Originally posted by masood_gandhi
Hi everybody,
I m using libpcap for packet caturing. But cant capture packet in inpromisc mode. The same programs works at its best in one pc and on other it dosent. I have installed latest driver for ethernet card. What may be the other problem???
Some network cards, such as 3Com, will not drop into promiscuous mode and this may be your problem.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem in transferring packet capturing code fron RH9 to FC2 Prakhardeep Linux - Networking 0 02-01-2005 03:57 AM
problem loading in promisc mode juanb Linux - Networking 1 09-16-2004 07:54 PM
capturing internet packet blackzone Linux - Security 3 09-15-2004 10:57 AM
Promisc mode:Win2k question A-dummy Linux - Networking 3 09-03-2002 10:54 PM
eth0 in promisc mode sabeel_ansari Programming 2 06-21-2002 06:14 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration