diff options
| author | Daniel Borkmann <daniel@iogearbox.net> | 2015-06-19 00:30:31 +0200 |
|---|---|---|
| committer | Daniel Borkmann <daniel@iogearbox.net> | 2015-06-20 00:17:37 +0200 |
| commit | 12c6a61fa54a2ee6a28c04ff51b2456f73d499b9 (patch) | |
| tree | d14825e9743e1a9bf5b9f82801908995d97632e6 /flowtop.8 | |
| parent | 15801106bd8ddbccd4125e8fe5d146cb908107ab (diff) | |
pcap_io: add cooked mode support
Originally submitted by Vadim in a different form, he wrote:
Use Linux "cooked" header for Netlink interface automatically or
as replacement of L2 header if "--cooked" option is specified:
http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html
'Cooked headers' makes sense to use for default or nsec pcap
types which does not contain protocol info.
Added new LINKTYPE_LINUX_SLL which indicates pcap file with
Linux "cooked" header as L2 layer header. This pcap file is
compatible with Wireshark's "cooked" header & vice-versa.
Signed-off-by: Vadim Kochan <vadim4j@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Diffstat (limited to 'flowtop.8')
0 files changed, 0 insertions, 0 deletions