summaryrefslogtreecommitdiff
path: root/flowtop.zsh
diff options
context:
space:
mode:
authorDaniel Borkmann <daniel@iogearbox.net>2015-06-19 00:30:31 +0200
committerDaniel Borkmann <daniel@iogearbox.net>2015-06-20 00:17:37 +0200
commit12c6a61fa54a2ee6a28c04ff51b2456f73d499b9 (patch)
treed14825e9743e1a9bf5b9f82801908995d97632e6 /flowtop.zsh
parent15801106bd8ddbccd4125e8fe5d146cb908107ab (diff)
pcap_io: add cooked mode support
Originally submitted by Vadim in a different form, he wrote: Use Linux "cooked" header for Netlink interface automatically or as replacement of L2 header if "--cooked" option is specified: http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html 'Cooked headers' makes sense to use for default or nsec pcap types which does not contain protocol info. Added new LINKTYPE_LINUX_SLL which indicates pcap file with Linux "cooked" header as L2 layer header. This pcap file is compatible with Wireshark's "cooked" header & vice-versa. Signed-off-by: Vadim Kochan <vadim4j@gmail.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Diffstat (limited to 'flowtop.zsh')
0 files changed, 0 insertions, 0 deletions