On Thu, 18 Feb 2010 17:12:31 +0200, Ori Finkelman <[email protected]> wrote: > Hi, > My Linux kernel module can sometimes drop packets on their way out (at > the IP layer). > However, I would like to be able to catch these packets in wireshark > even though I am dropping them. > > Is there any way I can push an sk_buff directly into libpcap so I will > get it into wireshark ? > > Thanks, > Ori
Hi, Maybe ulogd from netfilter can help you here. See: http://netfilter.org/projects/ulogd/index.html Thanks, Jaap ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
