On Thursday 2010-05-13 19:07, ratheesh k wrote: >On Thu, May 13, 2010 at 9:49 PM, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: >> If you do not have an Ethernet packet, this is going to explode. > >I have only one ethernet network interface (eth0 ) with 192.168.1.5 . >I could see in wireshark all packets with ethernet mac addresses . >When i try to prink the mac address or copy , it hangs .. Your hook received packets from all interfaces, including lo and ethhdr-less tunnels. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html