netsniff-ng: Add netlink dissector
commit5f4152b01e17433b29e3f9cc1407b60800b1e0b9
authorTobias Klauser <tklauser@distanz.ch>
Wed, 28 May 2014 12:32:10 +0000 (28 14:32 +0200)
committerTobias Klauser <tklauser@distanz.ch>
Wed, 28 May 2014 15:50:29 +0000 (28 17:50 +0200)
tree55eb213e301ede01578bae46683a4a72861f0d9c
parent98e21eb8633b31b006671735602df08d3f073261
netsniff-ng: Add netlink dissector

Add an initial implementation of a dissector to work on netlink messages
as received from an nlmon device.

Use can use it as follows to monitor netlink traffic to/from the kernel:

  modprobe nlmon
  ip link add type nlmon
  ip link set nlmon0 up

  netsniff-ng -i nlmon0

  ip link set nlmon 0 down
  ip link del dev nlmon0
  rmmod nlmon

Fixes: #89
Suggested-by: Daniel Borkmann <dborkman@redhat.com>
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
dissector.c
dissector_netlink.c [new file with mode: 0644]
dissector_netlink.h [new file with mode: 0644]
netsniff-ng/Makefile
proto_nlmsg.c [new file with mode: 0644]
protos.h