Le jeu 31/07/2003 à 22:02, Juliano Murlick a écrit : > How can i log the source mac address ? I'm logging every dropped packet, > my log is like it : > Jul 15 08:51:26 fwwan kernel: IPT: INPUT DROPPED IN=eth0 OUT= > MAC=00:00:00:00:00:00:00:00:8827:42:00:08:00 SRC=IP1 DST=IP2 LEN=60 > TOS=0x00 PREC=0x00 TTL=63 ID=52070 DF PROTO=TCP SPT=43812 DPT=25 > WINDOW=5840 RES=0x00 SYN URGP=0 > that mac is a destin address, i wanna log the source, is it possible ? What you have in log is the whole MAC header : 00:00:00:00:00:00:00:00:8827:42:00:08:00 You read it like this : DST MAC : 00:00:00:00:00:00 (strange...) SRC MAC : 00:00:88:27:42:00 PROTO : 08:00 (IP) -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
