linux - wireshark doesn't display icmp traffic between tow logical interafce -


i add tow logical interfaces test following commands :

# set link on physical device sudo ip link set dev eth0  # create logical interfaces sudo ip link add link eth0 dev meth0 address 00:00:8f:00:00:02 type macvlan sudo ip link add link meth0 dev meth1 address 00:00:8f:00:00:03 type macvlan  # order ip addresses , link sudo ip addr add 192.168.56.5/26 dev meth0 sudo ip addr add 192.168.56.6/26 dev meth1 sudo ip link set dev meth0 sudo ip link set dev meth1  ifconfig  meth0     link encap:ethernet  hwaddr 00:00:8f:00:00:02             inet addr:192.168.56.5  bcast:0.0.0.0  mask:255.255.255.192           inet6 addr: fe80::200:8fff:fe00:2/64 scope:link           broadcast running multicast  mtu:1500  metric:1           rx packets:35749 errors:0 dropped:47 overruns:0 frame:0           tx packets:131 errors:0 dropped:0 overruns:0 carrier:0           collisions:0 txqueuelen:0            rx bytes:3830628 (3.8 mb)  tx bytes:15278 (15.2 kb)  meth1     link encap:ethernet  hwaddr 00:00:8f:00:00:03             inet addr:192.168.56.6  bcast:0.0.0.0  mask:255.255.255.192           inet6 addr: fe80::200:8fff:fe00:3/64 scope:link           broadcast running multicast  mtu:1500  metric:1           rx packets:35749 errors:0 dropped:47 overruns:0 frame:0           tx packets:115 errors:0 dropped:0 overruns:0 carrier:0           collisions:0 txqueuelen:0            rx bytes:3830628 (3.8 mb)  tx bytes:14942 (14.9 kb) 

i run "wireshark" test traffic between meth0 , meth1 ,

so execute ping 192.168.56.6 generate icmp traffic traffic doesn't appear in wireshark . there a problem in wireshark logical interface ?

is there problem in wireshark logical interface?

probably not. you'll see same problem tcpdump, netsniff-ng, or else uses pf_packet sockets sniffing on linux (linux in general, not ubuntu in particular, or ubuntu, debian, , other debian-derived distributions).

given 2 logical interfaces on same machine, traffic between them not go onto ethernet - no ethernet adapters know of receive packets transmit, if packet sent on ethernet host wouldn't see it, , there wouldn't point in wasting network bandwidth putting traffic on network if ethernet adapter see own traffic.

so if you're capturing on eth0, might not see traffic. try capturing on lo instead.


Comments

Popular posts from this blog

How to mention the localhost in android -

php - Calling a template part from a post -

c# - String.format() DateTime With Arabic culture -