DBpulse Manual - find_all_devices

NAME

find_all_devices - utility that displays all devices eligible for packet capture using dbpulse


SYNOPSIS

find_all_devices


DESCRIPTION

find_all_devices uses the same library call as dbpulse to determine which network devices are eligible for packet capture. One of dbpulse's command line options is -d device which selects the appropriate network adpapter to capture packets on. find_all_devices will display a list of valid device options.

If you don't see a particular network adapter in the list of eligible devices, chances are that dbpulse will not be able to use that network adapter. Specifically, the loopback (127.0.0.1) adapter is not an eligible device except under Linux. This is because most OSes treat it as a special optimization for TCP/IP and don't provide standard API access.

Here is some sample output:

    (Solaris)
    # ifconfig -a
    lo0: flags=849<UP,LOOPBACK,RUNNING,MULTICAST> mtu 8232
    inet 127.0.0.1 netmask ff000000
    hme0: flags=863<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST> mtu 1500
    inet 192.168.54.53 netmask ffffff00 broadcast 192.168.54.255
    ether 8:0:20:a2:ab:42
    # find_all_devices
    1.  Device: hme0
    Family: 2
    Address: 192.168.54.53
    (Linux)
    # ifconfig -a 
    eth0 Link encap:Ethernet  HWaddr 00:D0:B7:B3:4C:39
        inet addr:192.168.54.54  Bcast:192.168.54.255  Mask:255.255.255.0
        UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
        RX packets:83373692 errors:0 dropped:0 overruns:0 frame:452
        TX packets:77504006 errors:0 dropped:0 overruns:0 carrier:0
        collisions:0 txqueuelen:100
        RX bytes:100908966 (96.2 Mb)  TX bytes:1934365520 (1844.7 Mb)
        Interrupt:9 Base address:0x5000
    eth0:1 Link encap:Ethernet  HWaddr 00:D0:B7:B3:4C:39
        inet addr:192.168.54.65  Bcast:192.168.54.255  Mask:255.255.255.0
        UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
        Interrupt:9 Base address:0x5000
    eth0:2 Link encap:Ethernet  HWaddr 00:D0:B7:B3:4C:39
        inet addr:192.168.54.68  Bcast:192.168.54.255  Mask:255.255.255.0
        UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
        Interrupt:9 Base address:0x5000
    lo Link encap:Local Loopback
        inet addr:127.0.0.1  Mask:255.0.0.0
        UP LOOPBACK RUNNING  MTU:16436  Metric:1
        RX packets:3303553 errors:0 dropped:0 overruns:0 frame:0
        TX packets:3303553 errors:0 dropped:0 overruns:0 carrier:0
        collisions:0 txqueuelen:0
        RX bytes:438624045 (418.3 Mb)  TX bytes:438624045 (418.3 Mb)
    # find_all_devices
    1.  Device: eth0
    Family: 2
    Address: 192.168.54.54
    2.  Device: eth0:1
    Family: 2
    Address: 192.168.54.65
    3.  Device: eth0:2
    Family: 2
    Address: 192.168.54.68
    4.  Device: any
    Comment: Pseudo-device that captures on all interfaces
    5.  Device: lo
    Family: 2
    Address: 127.0.0.1
    (Windows 2000)
    C:\> ipconfig /all
    Windows 2000 IP Configuration
    Host Name . . . . . . . . . . . . : ace
    Primary DNS Suffix  . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : fsautomation.com
    Ethernet adapter Local Area Connection:
    Connection-specific DNS Suffix  . : fsautomation.com
    Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet Adapter
    Physical Address. . . . . . . . . : 00-0D-87-4D-74-EC
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.54.107
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.54.254
    DNS Servers . . . . . . . . . . . : 192.168.54.1
    192.168.2.30
    C:\> find_all_devices
    1.  Device: \Device\NPF_{B0D29E75-247D-4289-8388-A9CBAE0BC8EC}
    Comment: FETNDISB7 VIA Rhine II Fast Ethernet Adapter
    Family: 2
    Address: 192.168.54.107