tcpdump mailing list archives

libpcap + netlink socket


From: madhuresh <madhurag () iitk ac in>
Date: Mon, 23 Oct 2006 20:47:36 +0530


Hello friends,

In the present architecture of linux kernel, 802.11 mac details are lost at the driver level.

I wish to filter packets (collected on wireless interface wlan0) based on their signal strength (present in 802.11 mac). For this i wish to set filter code in the driver (hostap in my case). The packet which passes the filter should then be received by libpcap which directly passes it to tcpdump for parsing.

So i need to have communication between libpcap and driver( to set filter options and for collecting the packets with 802.11 mac), which to my understanding can be done using netlink sockets. Please let me know if i am correct. Shall i use ioctl call for setting the filter options and netlink socket to transfer the complete (with 802.11 mac) packet. Also i need to prevent libpcap from reading from linux kernel (which it does in the existing code) but rather read the packet from netlink socket created between it and the driver. Let me know if i am thinking correctly and is it feasible.

A quick reply will be highly appreciated.

Thanks

-Madhuresh

PS: Please forgive me for poor english

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: