From owner-freebsd-net Tue Sep 4 10: 9:27 2001 Delivered-To: freebsd-net@freebsd.org Received: from InterJet.elischer.org (c421509-a.pinol1.sfba.home.com [24.7.86.9]) by hub.freebsd.org (Postfix) with ESMTP id AE92037B40D for ; Tue, 4 Sep 2001 10:09:22 -0700 (PDT) Received: from localhost (localhost.elischer.org [127.0.0.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id KAA18475; Tue, 4 Sep 2001 10:36:09 -0700 (PDT) Date: Tue, 4 Sep 2001 10:36:08 -0700 (PDT) From: Julian Elischer To: Brahma Naidu Golla Cc: freebsd-net@FreeBSD.org, sameerbr@sasken.com Subject: Re: Packet capturing at Link Layer... In-Reply-To: <15252.40345.212692.832960@sunk2.sasi.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org you can use a netgraph node to filter them feed the ones you DON'T want back into the "upper" hook of the ethernet interface. (I actually have a special node written to do this if I can get a release from Monzoon networks to release it) On Tue, 4 Sep 2001, Brahma Naidu Golla wrote: > Hi, > > I would like to capture certain packets (Based on the Protocol type of > ether header) at the link layer. I dont want the copies of the packets, but > I want the packets to be received by my user land application and not to be > processed by the L3 and L4. Could some body give me some pointers on this? > > One possibility is to use Raw sockets at the link layer. But how do I > specify the protocol type of ether header to filter the packets? > > TIA > --gb > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message