This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface 'lo' will create this type of frames. It has the following fields :
Field name | Field type | Description |
---|---|---|
pkt_type | uint16 | Type of packets |
ha_type | uint16 | Address type |
src | bytes | Source address when available |
The field pkt_type can have the following values :
Value | Description |
---|---|
0 | packet was sent to us |
1 | packet was broadcast |
2 | packet was multicast |
3 | packet was sent to somebody else |
4 | packet was sent by us |