On Oct 23, 2014, at 11:29 AM, Michael Richardson wrote:
> On the other hand, we have:
> /*
> * Link-layer header type for the netlink protocol (nlmon devices).
> */
> #define LINKTYPE_NETLINK 253
>
> which suggests that I can capture all netlink messages (which is what I want
> to
Please correct my understanding.
The libpcap/pcap-netfilter-linux.c file is about capturing NFLOG
packets from the netlink socket, i.e. ones that came from netfilter's
--log target.
On the other hand, we have:
/*
* Link-layer header type for the netlink protocol (nlmon devices).
*/
#define LIN