Re: LIBPCAP: ULOG iptables capturing

[Guy Harris <guy () alum mit edu>]

On Sat, Sep 06, 2003 at 04:06:10PM +0200, Johan Verrept wrote:
>       I have been working on a ULOG support (netlink socket) support in 
> libpcap for linux. Most of the capturing code is fairly easy and I have 
> tried to blend it in the current stuff without too many changes.
>       There is one thing I would like some suggestions about. What packet 
> header should I generate? should I create something like those 'cooked' 
> packets?

That depends on the information supplied by the netlink stuff.  I
presume you get raw network-layer (IP, IPv6, IPX, etc.) packet data from
it.  It probably also supplies an indication of the network-layer
protocol, and perhaps other information.  What information does it
supply?
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe