Hi.
Jayesh Agrawal wrote:
Hello!
In the earlier mail I think I was not clear... Actually the following
is my requirements:
1) our requirement is to capture all packets originating/destined to a
particular machine. This also includes ping packets to same
machine/localhost. i.e. at machine A we want to also capture packets
originating from say machine A and destined to machine A (these
propably do not go to data link layer).
did you consider using iptables -j QUEUE ? maybe it would be possible
with that (even if you want to delay loopback packets).
http://www.crhc.uiuc.edu/~grier/projects/libipq.html
2) we want to experiment the behavior by adding delays to those
packets, and that is why we want the actual packet and a copy of
packet wont serve purpose.
but i saw warning that when you delay for too long, queue may fill up
and you start to loose packets.
3) we are open to listen at whatever layer (datalinke/network) and so
how can we achieve this functionality.
you were right, loopback packets aren't seen in pcap, only thing going
through some interface
--
___________________________________
S pozdravom / Best regards
John Default
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
