diff options
| -rw-r--r-- | dissector.h | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/dissector.h b/dissector.h index c78ea48..8cb4234 100644 --- a/dissector.h +++ b/dissector.h @@ -16,6 +16,7 @@ #include "ring.h" #include "tprintf.h" +#include "linktype.h" #define PRINT_NORM 0 #define PRINT_LESS 1 @@ -56,6 +57,7 @@ static inline void __show_frame_hdr(uint8_t *packet, size_t len, int linktype, char tmp[IFNAMSIZ]; union tpacket_uhdr hdr; uint8_t pkttype = s_ll->sll_pkttype; + bool is_nl; if (mode == PRINT_NONE) return; @@ -66,7 +68,8 @@ static inline void __show_frame_hdr(uint8_t *packet, size_t len, int linktype, * it originally was set in the kernel. Thus, use nlmsghdr->nlmsg_pid to * restore the type. */ - if (linktype == AF_NETLINK && len >= sizeof(struct nlmsghdr)) { + is_nl = (linktype == LINKTYPE_NETLINK && len >= sizeof(struct nlmsghdr)); + if (is_nl && pkttype == PACKET_OUTGOING) { struct nlmsghdr *hdr = (struct nlmsghdr *) packet; pkttype = hdr->nlmsg_pid == 0 ? PACKET_KERNEL : PACKET_USER; } |