From: Martin Feeney (martin at domain tuatha.org)
Date: Mon 03 Sep 2001 - 10:29:28 IST
On Sun, 02 Sep 2001 10:51:20 Paul Jakma wrote:
> if the protocol is supported the kernel, (eg via a socket() domain)
> then netstat should support it too and display it.
Unfortunately not, the app I was trying to monitor is a purely userspace
solution (sitting on top of ppp).
> if the kernel doesn't support it, then the app must be using a raw
> socket, and tools that query the kernel will only ever find out it's
> a 'raw' socket.
Ah, OK. Makes sense.
> only way then to find out is to snoop on the traffic itself ->
> tcpdump.
Was doing that, but see previous mail as to why it's insufficient.
Thanks,
Martin.
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:11:56 GMT