Wireshark mailing list archives
Re: How to push packets into libpcap (Linux) ?
From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Fri, 19 Feb 2010 20:54:59 +0100
On Thu, 18 Feb 2010 17:12:31 +0200, Ori Finkelman <orifinkelman () gmail com> wrote:
Hi, My Linux kernel module can sometimes drop packets on their way out (at the IP layer). However, I would like to be able to catch these packets in wireshark even though I am dropping them. Is there any way I can push an sk_buff directly into libpcap so I will get it into wireshark ? Thanks, Ori
Hi, Maybe ulogd from netfilter can help you here. See: http://netfilter.org/projects/ulogd/index.html Thanks, Jaap ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- How to push packets into libpcap (Linux) ? Ori Finkelman (Feb 19)
- Re: How to push packets into libpcap (Linux) ? Jaap Keuter (Feb 19)
- <Possible follow-ups>
- Re: How to push packets into libpcap (Linux) ? Ori Finkelman (Feb 26)