[ILUG] Checking for IP protocols

[Martin Feeney]

On Sun, 02 Sep 2001 10:51:20 Paul Jakma wrote:

> if the protocol is supported the kernel, (eg via a socket() domain) 
> then netstat should support it too and display it.

Unfortunately not, the app I was trying to monitor is a purely userspace
solution (sitting on top of ppp).

> if the kernel doesn't support it, then the app must be using a raw 
> socket, and tools that query the kernel will only ever find out it's 
> a 'raw' socket.

Ah, OK.  Makes sense.

> only way then to find out is to snoop on the traffic itself -> 
> tcpdump.

Was doing that, but see previous mail as to why it's insufficient.

Thanks,

Martin.