diff options
| -rw-r--r-- | netsniff-ng.8 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/netsniff-ng.8 b/netsniff-ng.8 index 60da8d7..0bc874b 100644 --- a/netsniff-ng.8 +++ b/netsniff-ng.8 @@ -62,6 +62,10 @@ scheduled move to slower medias). You can then use mergecap(1) to transform all pcaps into a single large pcap. Thus, netsniff-ng then works multithreaded eventually. .PP +netsniff-ng can also be used to debug netlink traffic. On newer kernels one +needs to modprobe nlmon so that a ''netlink'' networking device appears that +can be used as an input device for netsniff-ng. +.PP .SH OPTIONS .PP .SS -i <dev|pcap|->, -d <dev|pcap|->, --in <dev|pcap|->, --dev <dev|pcap|-> |