[mpls-linux-general] sniffing mpls-packets with ethereal
Status: Beta
Brought to you by:
jleu
From: Kauder T. <Tho...@ic...> - 2001-12-06 08:23:26
|
Hi James, I guess you know that there's a problem sniifing mpls-packets if the machine running ethereal is the destination of these packets. I posted a message to the ethereal-user-mailinglist and that's what I've got as answer. >Well, if you can get the Linux networking stack to send *raw Ethernet* >frames to PF_PACKET/SOCK_RAW sockets *AND*, if the Linux MPLS code >modifies those frames in place, get it to do a copy-on-write of the >frame, so that it doesn't damage the copy of the frame sent to the >PF_PACKET/SOCK_RAW socket, that might help. > >I don't know how one would do that, however. Maybe you can use that. greetings Thorsten |