Re: [Daemonlogger-users] Soft tap not working

[Marty R. (maroesch) <mar...@ci...>]

Hi Sanjay,

I¹ll have to take a look more deeply but it appears (and I recall) that if
the input and output link types aren¹t the same then tap mode doesn¹t work
well or at all.  There should probably be some error checking code in
there to make sure they are the same.  The problem is that if the link
types don¹t match you need to rewrite the link layer header and that
doesn¹t work so well if you try to do raw socket output to an interface
that doesn¹t have the same protocol format.

Marty

-- 
Martin Roesch - mar...@ci...
VP/Chief Architect, Security Business Group
   ,,_
  o"  )~  Intelligent Cybersecurity for the Real World   . : | : . : | : .
   ''''






On 6/23/16, 10:42 AM, "Sanjay Patel" <sk...@sm...> wrote:

>I have all traffic mapping to tun0 but when I run tcpdump against tap0 I
>don't see anything, if I run it against eth0 in see traffic flowing.
>
>Sanjay
>
>Sent from my iPhone
>
>
>--------------------------------------------------------------------------
>----
>Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
>Francisco, CA to explore cutting-edge tech and listen to tech luminaries
>present their vision of the future. This family event has something for
>everyone, including kids. Get more information and register today.
>http://sdm.link/attshape
>_______________________________________________
>Daemonlogger-users mailing list
>Dae...@li...
>https://lists.sourceforge.net/lists/listinfo/daemonlogger-users