diff options
| author | Tobias Klauser <tklauser@distanz.ch> | 2014-05-28 14:32:10 +0200 |
|---|---|---|
| committer | Tobias Klauser <tklauser@distanz.ch> | 2014-05-28 17:50:29 +0200 |
| commit | 5f4152b01e17433b29e3f9cc1407b60800b1e0b9 (patch) | |
| tree | 55eb213e301ede01578bae46683a4a72861f0d9c /netsniff-ng | |
| parent | 98e21eb8633b31b006671735602df08d3f073261 (diff) | |
netsniff-ng: Add netlink dissector
Add an initial implementation of a dissector to work on netlink messages
as received from an nlmon device.
Use can use it as follows to monitor netlink traffic to/from the kernel:
modprobe nlmon
ip link add type nlmon
ip link set nlmon0 up
netsniff-ng -i nlmon0
ip link set nlmon 0 down
ip link del dev nlmon0
rmmod nlmon
Fixes: #89
Suggested-by: Daniel Borkmann <dborkman@redhat.com>
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
Diffstat (limited to 'netsniff-ng')
| -rw-r--r-- | netsniff-ng/Makefile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/netsniff-ng/Makefile b/netsniff-ng/Makefile index 2ddddfd..745bb1d 100644 --- a/netsniff-ng/Makefile +++ b/netsniff-ng/Makefile @@ -13,6 +13,7 @@ endif netsniff-ng-objs = dissector.o \ dissector_eth.o \ dissector_80211.o \ + dissector_netlink.o \ proto_arp.o \ proto_ethernet.o \ proto_icmpv4.o \ @@ -30,6 +31,7 @@ netsniff-ng-objs = dissector.o \ proto_ipv6_no_nxt_hdr.o \ proto_ipv6_routing.o \ proto_lldp.o \ + proto_nlmsg.o \ proto_none.o \ proto_tcp.o \ proto_udp.o \ |