This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface 'lo' will create this type of frames. It has the following fields :
| Field name | Field type | Description |
|---|---|---|
| pkt_type | uint16 | Type of packets |
| ha_type | uint16 | Address type |
| src | bytes | Source address when available |
The field pkt_type can have the following values :
| Value | Description |
|---|---|
| 0 | packet was sent to us |
| 1 | packet was broadcast |
| 2 | packet was multicast |
| 3 | packet was sent to somebody else |
| 4 | packet was sent by us |