diff options
| author | Daniel Borkmann <dborkman@redhat.com> | 2013-06-25 10:00:28 +0200 |
|---|---|---|
| committer | Daniel Borkmann <dborkman@redhat.com> | 2013-06-25 10:00:28 +0200 |
| commit | ea14716362e78d109490df9f345488d1c9a4a6c9 (patch) | |
| tree | 0994627eb5e95399f842842ea57a27e12eda88fb /netsniff-ng.8 | |
| parent | bedc03e69281508ffdb374085225b5ea516c4b13 (diff) | |
man: netsniff-ng: add section about netlink traffic debugging
Recently, the nlmon device driver got accepted [1], so that it's now
possible to debug netlink traffic as well.
[1] http://thread.gmane.org/gmane.linux.network/273952
Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
Diffstat (limited to 'netsniff-ng.8')
| -rw-r--r-- | netsniff-ng.8 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/netsniff-ng.8 b/netsniff-ng.8 index 60da8d7..0bc874b 100644 --- a/netsniff-ng.8 +++ b/netsniff-ng.8 @@ -62,6 +62,10 @@ scheduled move to slower medias). You can then use mergecap(1) to transform all pcaps into a single large pcap. Thus, netsniff-ng then works multithreaded eventually. .PP +netsniff-ng can also be used to debug netlink traffic. On newer kernels one +needs to modprobe nlmon so that a ''netlink'' networking device appears that +can be used as an input device for netsniff-ng. +.PP .SH OPTIONS .PP .SS -i <dev|pcap|->, -d <dev|pcap|->, --in <dev|pcap|->, --dev <dev|pcap|-> |