pom:match:linux_cooked
match_linux_cooked
This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface 'lo' will create this type of frames. It has the following fields :
| Field name | Field type | Description |
|---|---|---|
| pkt_type | uint16 | Type of packets |
| ha_type | uint16 | Address type |
| src | bytes | Source address when available |
The field pkt_type can have the following values :
| Value | Description |
|---|---|
| 0 | packet was sent to us |
| 1 | packet was broadcast |
| 2 | packet was multicast |
| 3 | packet was sent to somebody else |
| 4 | packet was sent by us |
pom/match/linux_cooked.txt · Last modified: by 127.0.0.1