disable tcp/7ip on a single interface

hi,

I'm trying to passive sniff a high number of packets with a linux
machine, and i wish to disable/remove tcp/ip over the interface that
I'm using to sniff. (the same thing I can do unchecking "TCP/IP
protocol" checkbox in Windows)

can anyone help me?

thanks!!!

"Massimo" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com

> I'm trying to passive sniff a high number of packets with a linux
> machine, and i wish to disable/remove tcp/ip over the interface that
> I'm using to sniff.

Just specify exactly which protocol(s) to sniff for, such as UDP or raw; you
can get as detailed as you like with most sniffers.

Massimo wrote:
> hi,
>
> I'm trying to passive sniff a high number of packets with a linux
> machine, and i wish to disable/remove tcp/ip over the interface that
> I'm using to sniff. (the same thing I can do unchecking "TCP/IP
> protocol" checkbox in Windows)

Depending on your approach, it could depend on your distro. In
Fedora/RedHat, I specify BOOTPROTO as none in my ifcfg files, which
brings the if up, but doesn't assign an IP address.

Ultimately all that does is change the parameters ifconfig uses to bring
the device up. Read your distro's documentation and the ifconfig man
page to see how you should do it.

Allen Kistler ha scritto:

> Massimo wrote:
> > hi,
> >
> > I'm trying to passive sniff a high number of packets with a linux
> > machine, and i wish to disable/remove tcp/ip over the interface that
> > I'm using to sniff. (the same thing I can do unchecking "TCP/IP
> > protocol" checkbox in Windows)
>
> Depending on your approach, it could depend on your distro. In
> Fedora/RedHat, I specify BOOTPROTO as none in my ifcfg files, which
> brings the if up, but doesn't assign an IP address.
>
> Ultimately all that does is change the parameters ifconfig uses to bring
> the device up. Read your distro's documentation and the ifconfig man
> page to see how you should do it.

thanks!