Re: [Netlink] virtual interface

2006-01-31 Thread Robert Iakobashvili
Hi, On 1/31/06, jamal <[EMAIL PROTECTED]> wrote: > On Tue, 2006-31-01 at 16:26 +0100, Harald Welte wrote: > > On Tue, Jan 24, 2006 at 09:19:02PM +0100, Mathieu Geli wrote: > > > > > Here is a patch that add a netlink virtual interface. > > > > I reall

Re: [Netlink] virtual interface

2006-01-31 Thread jamal
On Tue, 2006-31-01 at 16:26 +0100, Harald Welte wrote: > On Tue, Jan 24, 2006 at 09:19:02PM +0100, Mathieu Geli wrote: > > > Here is a patch that add a netlink virtual interface. > > I really like the possibility that it offers. In fact, I always wanted > something like a

Re: [Netlink] virtual interface

2006-01-31 Thread Patrick McHardy
Harald Welte wrote: > On Tue, Jan 24, 2006 at 09:19:02PM +0100, Mathieu Geli wrote: > > >>Here is a patch that add a netlink virtual interface. > > > I really like the possibility that it offers. In fact, I always wanted > something like a 'promiscuous netl

Re: [Netlink] virtual interface

2006-01-31 Thread Harald Welte
On Tue, Jan 24, 2006 at 09:19:02PM +0100, Mathieu Geli wrote: > Here is a patch that add a netlink virtual interface. I really like the possibility that it offers. In fact, I always wanted something like a 'promiscuous netlink socket'. Whether it is the right thing to add

Re: [Netlink] virtual interface

2006-01-25 Thread Mathieu Geli
> Do you think, that such approach may be extended to unix-domain > traffic as well, or there are other ways to sniff such packets? I don't know if similar things exists or have existed for UNIX sockets. That could be useful having an infrastructure that'll enable to redirect certain socket type t

Re: [Netlink] virtual interface

2006-01-25 Thread Robert Iakobashvili
Hi Mathieu, > Here is a patch that add a netlink virtual interface. > Through a hook in af_netlink.c every packets are duplicated and sent to > that interface. Thus userspace sniffers can capture them. Looks like an interesting direction. Do you think, that such approach may be extende

[Netlink] virtual interface

2006-01-24 Thread Mathieu Geli
Hi, Here is a patch that add a netlink virtual interface. Through a hook in af_netlink.c every packets are duplicated and sent to that interface. Thus userspace sniffers can capture them. Dissectors are being developed for scapy [1] at the moment. I'll be glad to hear about how to fix the c