* socket() datalink bug
@ 2003-03-20 17:01 Ricardo
0 siblings, 0 replies; only message in thread
From: Ricardo @ 2003-03-20 17:01 UTC (permalink / raw)
To: linux-kernel
This was found while experimenting with a sniffer, so I have IFF_PROMISC
set when doing the recv(). And my kernel is a 2.4.19-gentoo-r9, but a
normal 2.4.18 from slackware 8.1 has the same behavior.
socket(PF_PACKET,SOCK_RAW,htons(ETH_P_IP));
Does not return a copy of the packets send by the computer you are on. It
returns the IP traffic that other people send normally. So the sniffer
can't see packets from the computer it is running on. This shouldn't be so
as htons(ETH_P_IP) should only be a filter that would return IP only
packets.
socket(PF_PACKET,SOCK_RAW,htons(ETH_P_ALL));
Works just fine, so I think the filter is excluding too much.
Or isn't it a bug?
Please Cc it to me as I haven't subscribed the mailing list.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2003-03-20 16:51 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2003-03-20 17:01 socket() datalink bug Ricardo
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®