Subject: Re: link layer headers from ipmon?
To: Andrew Brown <firstname.lastname@example.org>
From: Ignatios Souvatzis <email@example.com>
Date: 05/05/2000 20:10:43
On Thu, May 04, 2000 at 11:02:29PM -0400, Andrew Brown wrote:
> is there any way that i can convince ipf/ipmon to log the link layer
> headers from packets that it logs? i'm logging packets that i don't
> expect to see on my network (of course), but without the link layer
> headers (ethernet in this case) i have no idea where they're coming
> or is this simply not done?
I dont expect them to be visible at that level.
However, if there is _some_ pattern you can use to select them, you can
use tcpdump -e to log them.