summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--netsniff-ng.84
1 files changed, 4 insertions, 0 deletions
diff --git a/netsniff-ng.8 b/netsniff-ng.8
index 60da8d7..0bc874b 100644
--- a/netsniff-ng.8
+++ b/netsniff-ng.8
@@ -62,6 +62,10 @@ scheduled move to slower medias). You can then use mergecap(1) to transform
all pcaps into a single large pcap. Thus, netsniff-ng then works multithreaded
eventually.
.PP
+netsniff-ng can also be used to debug netlink traffic. On newer kernels one
+needs to modprobe nlmon so that a ''netlink'' networking device appears that
+can be used as an input device for netsniff-ng.
+.PP
.SH OPTIONS
.PP
.SS -i <dev|pcap|->, -d <dev|pcap|->, --in <dev|pcap|->, --dev <dev|pcap|->