Subject: Re: Dumping encrypted and unencrypted packets when using IPSec
To: Greg Troxel <gdt@ir.bbn.com>
From: Martin Husemann <martin@duskware.de>
List: tech-net
Date: 04/09/2004 16:20:11
On Fri, Apr 09, 2004 at 10:12:54AM -0400, Greg Troxel wrote:
> [..] but then I thought that pppoe0 should act very much
> like ppp0, which I think uses DLT_PPP and dumps PPP frames.  I think
> the current behavior is like this - the ethernet frames are omitted on
> pppoe(4), but not the PPPoE frame headers (which seem to be a little
> different from PPP headers, but not that much).

Exactly, it mimics ppp0, with the minmal necessary changes. And you can get
at the complete ethernet frames easily by running tcpdump on the raw ethernet
interface instead of on pppoe0.


Martin