User Tools

Site Tools


pom:match:linux_cooked

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

pom:match:linux_cooked [2012/10/12 08:57] (current)
Line 1: Line 1:
 +===== match_linux_cooked =====
 +This module match raw frames. This is usually generated when sniffing from special interfaces which do have a special layer 2. For example PPP interface and the loopback interface '​lo'​ will create this type of frames.
 +It has the following fields :
 +
 +^ Field name ^ Field type ^ Description ^
 +|pkt_type |uint16 | Type of packets |
 +|ha_type |uint16 | Address type |
 +|src |bytes |Source address when available |
 +
 +
 +The field pkt_type can have the following values :
 +
 +^ Value ^ Description ^
 +|0 |packet was sent to us |
 +|1 |packet was broadcast |
 +|2 |packet was multicast |
 +|3 |packet was sent to somebody else |
 +|4 |packet was sent by us |
  
pom/match/linux_cooked.txt ยท Last modified: 2012/10/12 08:57 (external edit)