08-13-2009
Pcap is a library to capture traffic coming in on a device for any port, not just a single one. It will even capture traffic to a TCP/UDP port that's not even open. This means that it won't bind to any single port, but will watch the traffic at a very low level. If you want to transfer data between two machines, use the OS networking routines (socket/bind/connect/...) instead of Pcap.
9 More Discussions You Might Find Interesting
1. Filesystems, Disks and Memory
I'm working on a project to extract some information from archive file. I ran my program through MFCobol animator and I'm receiving
a status code of 39(file not compatible) when opening the file for input. I have tried just about everything, rebuild, convert, etc. but
I receive the same message.... (6 Replies)
Discussion started by: bigdawg
6 Replies
2. Shell Programming and Scripting
Hi all,
Need some advise again. I am new to sendmail service which is already configured by some other administrators. I would need to write a script to check whether sendmail service is enabled in Solaris and Linux.
Using this command "ps -ef | grep sendmail | grep -v grep".
Or is there... (6 Replies)
Discussion started by: Kinki
6 Replies
3. IP Networking
Hi
I want a UDP client receiving program. Here is the scenario. The client has to listen to the UDP server and has to acknowledge back on receiving data from the server. Can anyone help me out.
regards,
Nirmala (1 Reply)
Discussion started by: Nirmala
1 Replies
4. UNIX for Dummies Questions & Answers
Hi,
Please help me out, how to check whether a port currently being used or not.
is there any command which give the result?
Thanks
Rajesh (6 Replies)
Discussion started by: rajesh08
6 Replies
5. IP Networking
Hi all,
Application A is using an port number 100 and is binded to an interface 1.
Application B is using an port number 100 and is binded to an interface 2.
can we bind the two applications on same port number based on interfaces.
what i want to know is two... (3 Replies)
Discussion started by: vijaypdp2006
3 Replies
6. IP Networking
Hi,
We can use the same port number for two applications based on protocols.(i.e one application is based on TCP and the other application based on UDP).
But i don't know about interfaces, can anyone one help........
1) Can we use same port number for different... (0 Replies)
Discussion started by: vijaypdp2006
0 Replies
7. UNIX for Advanced & Expert Users
hi,
I am writing one packet receiving program using libpcap library.
Now, I want to check port is already using or not.
how to check in receiver program..
If normal program,using bind return value we can able to check the port is already using or not.
but, in pcap program how can i... (1 Reply)
Discussion started by: ram.sj
1 Replies
8. Shell Programming and Scripting
I need to launch a script as soon as a file comes via a specified port on my system from another system. Program should work as a dameon and should invoke only when port start/stop accepting file. Any idea how to program/script it...
Please no suggestions for cron. Thanks in advance. (1 Reply)
Discussion started by: sumitwa
1 Replies
9. Solaris
I was just checking to see if anyone had a script that would allow me to go from port number to program name. I tried to create my own script but it looks like it only works for IPv4 sockets and it looks like daemons such as sshd return as AF_INET6 (in pfiles) for some reason. I can fix my script... (0 Replies)
Discussion started by: thmnetwork
0 Replies
FAITH(4) BSD Kernel Interfaces Manual FAITH(4)
NAME
faith -- IPv6-to-IPv4 TCP relay capturing interface
SYNOPSIS
device faith
DESCRIPTION
The faith interface captures IPv6 TCP traffic, for implementing userland IPv6-to-IPv4 TCP relay like faithd(8).
Each faith interface is created at runtime using interface cloning. This is most easily done with the ifconfig(8) create command or using
the cloned_interfaces variable in rc.conf(5).
Special action will be taken when IPv6 TCP traffic is seen on a router, and the routing table suggests to route it to the faith interface.
In this case, the packet will be accepted by the router, regardless of the list of IPv6 interface addresses assigned to the router. The
packet will be captured by an IPv6 TCP socket, if it has the IN6P_FAITH flag turned on and matching address/port pairs. As a result, faith
will let you capture IPv6 TCP traffic to some specific destination addresses. Userland programs, such as faithd(8) can use this behavior to
relay IPv6 TCP traffic to IPv4 TCP traffic. The program can accept some specific IPv6 TCP traffic, perform getsockname(2) to get the IPv6
destination address specified by the client, and perform application-specific address mapping to relay IPv6 TCP to IPv4 TCP.
The IN6P_FAITH flag on a IPv6 TCP socket can be set by using setsockopt(2), with level IPPROTO_IPV6 and optname IPv6_FAITH.
To handle error reports by ICMPv6, some ICMPv6 packets routed to an faith interface will be delivered to IPv6 TCP, as well.
To understand how faith can be used, take a look at the source code of faithd(8).
As the faith interface implements potentially dangerous operations, great care must be taken when configuring it. To avoid possible misuse,
the sysctl(8) variable net.inet6.ip6.keepfaith must be set to 1 prior to using the interface. When net.inet6.ip6.keepfaith is 0, no packets
will be captured by the faith interface.
The faith interface is intended to be used on routers, not on hosts.
SEE ALSO
inet(4), inet6(4), faithd(8)
Jun-ichiro itojun Hagino and Kazu Yamamoto, An IPv6-to-IPv4 transport relay translator, RFC3142.
HISTORY
The FAITH IPv6-to-IPv4 TCP relay translator first appeared in the WIDE hydrangea IPv6 stack.
BSD
April 10, 1999 BSD