On ifconfig I can see the number of packets sent/received with the tx/rx values. With that interface on promiscuous mode, if I turn on tcpdump on that interface I should see all packets sent/received on that interface right?
tcpdump -XX -e -n -s0 -i <iface>
(There may be redundancy in the options :p)
And yet I don't see all packets sent. Any ideas?
EDIT: also, I read the ifconfig manual and it reads:
"Ifconfig is used to configure the kernel-resident network interfaces."
So, ifconfig reads tx/rx at kernel level right? Is there any way to get these readings at driver level?
EDIT2: also, can the driver be programmed to send the packets to the kernel AND to a running program?
EDIT3: could I make a program to sniff ANY bytes passing on the interface, regardless of their format? Perhaps tcpdump is not giving me the packets because it cannot perceive their format.