User Tools

Site Tools


pom:match:linux_cooked

match_linux_cooked

This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface 'lo' will create this type of frames. It has the following fields :

Field name Field type Description
pkt_type uint16 Type of packets
ha_type uint16 Address type
src bytes Source address when available

The field pkt_type can have the following values :

Value Description
0 packet was sent to us
1 packet was broadcast
2 packet was multicast
3 packet was sent to somebody else
4 packet was sent by us
pom/match/linux_cooked.txt · Last modified: 2012/10/12 08:57 (external edit)