Subject: Re: link layer headers from ipmon?
To: Andrew Brown <atatat@atatdot.net>
From: Ignatios Souvatzis <is@jocelyn.rhein.de>
List: current-users
Date: 05/05/2000 20:10:43
On Thu, May 04, 2000 at 11:02:29PM -0400, Andrew Brown wrote:
> is there any way that i can convince ipf/ipmon to log the link layer
> headers from packets that it logs?  i'm logging packets that i don't
> expect to see on my network (of course), but without the link layer
> headers (ethernet in this case) i have no idea where they're coming
> from.
> 
> or is this simply not done?

I dont expect them to be visible at that level.
However, if there is _some_ pattern you can use to select them, you can
use tcpdump -e to log them.

Regards,
	-is