Re: How to push packets into libpcap (Linux) ?

[Jaap Keuter <jaap.keuter () xs4all nl>]

On Thu, 18 Feb 2010 17:12:31 +0200, Ori Finkelman <orifinkelman () gmail com>
wrote:
> Hi,
> My Linux kernel module can sometimes drop packets on their way out (at
> the IP layer).
> However, I would like to be able to catch these packets in wireshark
> even though I am dropping them.
>
> Is there any way I can push an sk_buff directly into libpcap so I will
> get it into wireshark ?
>
> Thanks,
> Ori

Hi,

Maybe ulogd from netfilter can help you here.
See: http://netfilter.org/projects/ulogd/index.html

Thanks,
Jaap
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe