Re: [tcpdump-workers] capturing the netlink socket on Linux

2014-10-23 Thread Guy Harris
On Oct 23, 2014, at 11:29 AM, Michael Richardson wrote: > On the other hand, we have: > /* > * Link-layer header type for the netlink protocol (nlmon devices). > */ > #define LINKTYPE_NETLINK 253 > > which suggests that I can capture all netlink messages (which is what I want > to

[tcpdump-workers] capturing the netlink socket on Linux

2014-10-23 Thread Michael Richardson
Please correct my understanding. The libpcap/pcap-netfilter-linux.c file is about capturing NFLOG packets from the netlink socket, i.e. ones that came from netfilter's --log target. On the other hand, we have: /* * Link-layer header type for the netlink protocol (nlmon devices). */ #define LIN