Another possible indicator is if an interface has an IP address assigned and others do not. The most reliable indicator of the active network interface is that it will have greater number of steadily increasing packets with a corresponding active number of packets/s (which will vary over time). If you have a wired local area network connection and the interface is enabled, that's probably the active interface, but you might also have a wireless interface that is enabled and you may or may not be the primary interface. The goal is to identify the active interface that will be used to communicate with the Internet when you open a browser and navigate to a website. However, in most cases, you'll only be interested in capturing packets from a network interface.
On Linux/Unix/Mac platforms, you might also see a loopback interface that can be selected to capture packets being sent between applications on the same machine.
0 kommentar(er)
