Re: Network Layer

From: Stanley Feng \(MSFT\) (sfeng_at_microsoft_dot_com)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 15:56:16 -0800

Inline. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples (if any) are subject to the terms specified
at http://www.microsoft.com/info/cpyright.htm"
"hxn" <therenton at hotmail at xom> wrote in message
news:O9eud5%23EEHA.580@TK2MSFTNGP11.phx.gbl...
> hi,
> i have some misunderstaind problems in my mind .
> When we create a sock raw sniffer , we catch the packets that are on
network
> layer . am i wrong ?
[sfeng] Yes, raw socket sniffer written through SIO_RCVALL catches packets
on network layer, typically, that is IP layer.
> secondly , i have used a sniffer (ethersniff) to watch whats going on . It
> suprised me , it catches packets on second level (data link layer) ? how
can
> i write code  like this  ?
>
[sfeng] Consider an NDIS IM driver.
> thanks for your help ?
>
>
> currently : i am trying to develop a sniffer
>
>

Relevant Pages

  • Re: Re: TCP Projects for 8.0 - first cut wiki page
    ... In FreeBSD 6, we did link layer processing in the ithread, and deferred network layer and socket layer processing to the netisr and user thread. ... In FreeBSD 7, we process up through the network layer and socket deliver in the ithread, and only the socket read/copyout are deferred to the user thread. ...
    (freebsd-arch)
  • Re: Re: TCP Projects for 8.0 - first cut wiki page
    ... In FreeBSD 6, we did link layer processing in the ithread, and deferred network layer and socket layer processing to the netisr and user thread. ... In FreeBSD 7, we process up through the network layer and socket deliver in the ithread, and only the socket read/copyout are deferred to the user thread. ...
    (freebsd-net)
  • Re: [OT] CNN bragging about "FTP technology"
    ... The specs for addresses aren't TCP, ... > data packets are put together in the right order at the receiving end; ... The machine, or physical layer, comprises ... The network layer has to do with addresses, ...
    (talk.origins)
  • Re: [ANNOUNCE] FLAME: external kernel module for L2.5 meshing
    ... FLAME provides an intermediate layer between the network layer (e.g. ... FLAME appears as a normal Ethernet-type MAC layer, ...
    (Linux-Kernel)
  • Network Layer
    ... When we create a sock raw sniffer, we catch the packets that are on network ... it catches packets on second level (data link layer)? ...
    (microsoft.public.win32.programmer.networks)