| commit | 1138c3724d1e2334985166405053291381e030c8 | |
| author | Daniel Borkmann <dborkman@redhat.com> | |
| Fri, 25 Jan 2013 14:26:17 +0000 (25 15:26 +0100) | ||
| committer | Daniel Borkmann <dborkman@redhat.com> | |
| Fri, 25 Jan 2013 14:26:17 +0000 (25 15:26 +0100) | ||
| tree | 242532331fde71c820cd8134081b0c9b31e4ef65 | treesnapshot (tar.gz zip) |
| parent | 1abdf5cb21d65e0e5b8ce71797144802fbeab6f9 | commitdiff |
netsniff-ng: also support tcpdump-like filters
This is done either via:
- netsniff-ng -i eth0 tcp and port 80
- netsniff-ng -i eth0 -f "tcp and port 80" -s -o dump.pcap
We need to bind against libpcap from now on, but only to use its filter
compiler, no need to reinvent the wheel. Also, people are familiar with
the tcpdump syntax expression.
Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
This is done either via:
- netsniff-ng -i eth0 tcp and port 80
- netsniff-ng -i eth0 -f "tcp and port 80" -s -o dump.pcap
We need to bind against libpcap from now on, but only to use its filter
compiler, no need to reinvent the wheel. Also, people are familiar with
the tcpdump syntax expression.
Signed-off-by: Daniel Borkmann <dborkman@redhat.com>