| commit | 47b3d6c254ca31dc57af4a1a17526e1dc593702a | |
| author | Daniel Borkmann <dborkman@redhat.com> | |
| Thu, 10 Apr 2014 09:42:36 +0000 (10 11:42 +0200) | ||
| committer | Daniel Borkmann <dborkman@redhat.com> | |
| Thu, 10 Apr 2014 09:48:40 +0000 (10 11:48 +0200) | ||
| tree | af8c8012127cf960f2cc1327fccdfdd97bcae4ed | treesnapshot (tar.gz zip) |
| parent | 3bcd95bb1da97f00eb0e1d6e8d497911c14b4e44 | commitdiff |
dissector: display packet direction for tap'ing on netlink devices (nlmon)
Linux kernel provides nlmon device (ARPHRD_NETLINK) driver that
can tap on netlink traffic, e.g.:
Setup:
modprobe nlmon
ip link add type nlmon
ip link set nlmon0 up
Capture:
netsniff-ng -i nlmon0 ... (or -i any)
Teardown:
ip link set nlmon0 down
ip link del dev nlmon0
rmmod nlmon
Provide information about the packet direction (user space or kernel
space), so that dissector will show that properly.
Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
Linux kernel provides nlmon device (ARPHRD_NETLINK) driver that
can tap on netlink traffic, e.g.:
Setup:
modprobe nlmon
ip link add type nlmon
ip link set nlmon0 up
Capture:
netsniff-ng -i nlmon0 ... (or -i any)
Teardown:
ip link set nlmon0 down
ip link del dev nlmon0
rmmod nlmon
Provide information about the packet direction (user space or kernel
space), so that dissector will show that properly.
Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
| built_in.h | diffblobblamehistory | |
| dissector.h | diffblobblamehistory |