diff options
| author | Tobias Klauser <tklauser@distanz.ch> | 2014-05-28 18:17:22 +0200 |
|---|---|---|
| committer | Tobias Klauser <tklauser@distanz.ch> | 2014-05-28 18:23:09 +0200 |
| commit | c288c3a32659db207db09fdb8beb6ee00e3eaff0 (patch) | |
| tree | b8fb977030fc04d80659e262d2930644fe0f9587 | |
| parent | 5f4152b01e17433b29e3f9cc1407b60800b1e0b9 (diff) | |
netsniff-ng: Print process name of the netlink message origin
In the netlink message dissector, use the PID from the header to look up
the process name of the sending process.
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
| -rw-r--r-- | proto_nlmsg.c | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/proto_nlmsg.c b/proto_nlmsg.c index f5abf57..0098d27 100644 --- a/proto_nlmsg.c +++ b/proto_nlmsg.c @@ -4,7 +4,10 @@ * Subject to the GPL, version 2. */ +#include <stdio.h> +#include <unistd.h> #include <libnl3/netlink/msg.h> +#include <libgen.h> #include "pkt_buff.h" #include "proto.h" @@ -14,10 +17,23 @@ static void nlmsg(struct pkt_buff *pkt) struct nlmsghdr *hdr = (struct nlmsghdr *) pkt_pull(pkt, sizeof(*hdr)); char type[32]; char flags[128]; + char procname[1024]; if (hdr == NULL) return; + /* Look up the process name if message is not coming from the kernel */ + if (hdr->nlmsg_pid != 0) { + char path[1024]; + int ret; + + snprintf(path, sizeof(path), "/proc/%u/exe", hdr->nlmsg_pid); + ret = readlink(path, procname, sizeof(procname) - 1); + if (ret < 0) + procname[0] = '\0'; + } else + snprintf(procname, sizeof(procname), "kernel"); + tprintf(" [ NLMSG "); tprintf("Len %u, ", hdr->nlmsg_len); tprintf("Type 0x%.4x (%s%s%s), ", hdr->nlmsg_type, @@ -30,6 +46,9 @@ static void nlmsg(struct pkt_buff *pkt) colorize_end()); tprintf("Seq-Nr %u, ", hdr->nlmsg_seq); tprintf("PID %u", hdr->nlmsg_pid); + if (procname[0]) + tprintf(" (%s%s%s)", colorize_start(bold), basename(procname), + colorize_end()); tprintf(" ]\n"); } |