ELI5. On almost any modern system, tcpdump will be capturing IP over Ethernet, meaning that the data actually captured by libpcap consists of Ethernet frames containing IP packets.

522 views

Can somebody explain me this?

On almost any modern system, tcpdump will be capturing IP over Ethernet, meaning that the data actually captured by libpcap consists of Ethernet frames containing IP packets.

In: Technology

2 Answers

Anonymous 0 Comments

Is it what the sentence means, why you can do it or how it works technically?

What is the question exactly?

You can use software to capture the networking traffic that your computer sends and receive.
Most of the time it is IP packets send over ethernet. The frame is the name used in ethernet for the data that is sent over it so like a packet for IP but on a bit lower level.

You are viewing 1 out of 2 answers, click here to view all answers.