diff options
author | Guy Harris <guy@alum.mit.edu> | 2000-02-01 21:21:47 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2000-02-01 21:21:47 +0000 |
commit | 6e8ab029fc6188ccd4e7a9a24c7413f099e91307 (patch) | |
tree | 0b494a3ab6fe96ca1f1084a49483411ce3e6e0bf /README.linux | |
parent | 1c751dbe7b4251b30c0e57ad42d81f92226194a0 (diff) |
Note that capture filters don't work on Linux loopback devices with the
current version of libpcap.
svn path=/trunk/; revision=1592
Diffstat (limited to 'README.linux')
-rw-r--r-- | README.linux | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/README.linux b/README.linux index 4affb43d7f..e754b733f6 100644 --- a/README.linux +++ b/README.linux @@ -1,4 +1,4 @@ -$Id: README.linux,v 1.3 2000/01/14 08:18:58 guy Exp $ +$Id: README.linux,v 1.4 2000/02/01 21:21:47 guy Exp $ The standard libpcap compiled for Linux has a timeout problem; it doesn't support the timeout argument to "pcap_open_live()". @@ -12,3 +12,10 @@ version of libpcap you're using, to ethereal-dev@zing.org. The current version of Ethereal should work with versions of libpcap that have been patched to fix the timeout problem, as well as working with unpatched versions. + +An additional problem, on Linux, with current versions of libpcap is +that capture filters do not work when snooping loopback devices; if +you're capturing on a Linux loopback device, do not use a capture +filter, as it will probably reject most if not all packets, including +the packets it's intended to accept - instead, capture all packets and +use a display filter to select the packets you want to see. |