Re: [Xen-users] How to capture the packet header data using shark in Dom0

[PREETI MISHRA <scholar.preeti@xxxxxxxxx>]

I have captured the packets which are showing src and MAC of packets; 

I can verify MAC of packets from xen store info;

How can i verify whether the packet IPs are correct? or spoofed

On Tue, Jul 26, 2016 at 1:53 PM, PREETI MISHRA <scholar.preeti@xxxxxxxxx> wrote:

I want to read packet header values of packets at the netback-driver of VM (i.e. vif2.0-emu).

I usually use tshark for normal physical system as

tshark -r test.pcap -T fields -e frame.number -e eth.src -e eth.dst -e ip.src -e ip.dst -e frame.len > test1.csv

In Dom0:

I captured all data at vif2.0-emu and saved in pcap file. How to process it using tshark to read specific header values

How can i use tshark to read packetheaders of emulated interface card.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
https://lists.xen.org/xen-users