From cdafc50c08c2daecd96c84c24faf51248b77b6fb Mon Sep 17 00:00:00 2001 From: Daniel Borkmann Date: Wed, 3 Jul 2013 13:07:19 +0200 Subject: pcap_io: add LINKTYPE_NETLINK for netlink pcaps This adds basic linktype support for netlink "nlmon" devices. Todo: we sill need to set the correct pcap type on capturing. Signed-off-by: Daniel Borkmann --- pcap_io.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'pcap_io.h') diff --git a/pcap_io.h b/pcap_io.h index 7739868..5488788 100644 --- a/pcap_io.h +++ b/pcap_io.h @@ -35,6 +35,7 @@ #define LINKTYPE_EN10MB 1 /* Ethernet (10Mb) */ #define LINKTYPE_IEEE802_11 105 /* IEEE 802.11 wireless */ +#define LINKTYPE_NETLINK 253 /* Netlink messages */ struct pcap_filehdr { uint32_t magic; @@ -573,8 +574,10 @@ static inline void pcap_validate_header(const struct pcap_filehdr *hdr) switch (hdr->linktype) { case LINKTYPE_EN10MB: case LINKTYPE_IEEE802_11: + case LINKTYPE_NETLINK: case ___constant_swab32(LINKTYPE_EN10MB): case ___constant_swab32(LINKTYPE_IEEE802_11): + case ___constant_swab32(LINKTYPE_NETLINK): break; default: panic("This file has not a valid pcap header\n"); -- cgit v1.2.3-54-g00ecf