Re: [tcpdump-workers] wireshark extension for a Kernel Module (like Usbmon)

2022-03-08 Thread Christian via tcpdump-workers
--- Begin Message --- forget to evoke autoconf again, now it's within the library and I have to do the next step. Thank you so far BR Christian > ___ > tcpdump-workers mailing list > tcpdump-workers@lists.tcpdump.org > https://lists.sandelman.ca/mailman

Re: [tcpdump-workers] wireshark extension for a Kernel Module (like Usbmon)

2022-03-08 Thread Christian via tcpdump-workers
--- Begin Message --- Hello Guy, thank you for your help. >> further down: >> #ifdef PCAP_SUPPORT_KPNODE >> || strstr(device, "kpnode") != NULL >> #endif > That's presumably in pcap_lookupnet(); if so, that's the correct way to add > kpnode there. > > (I need to change that to use a bett

Re: [tcpdump-workers] wireshark extension for a Kernel Module (like Usbmon)

2022-03-07 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Mar 7, 2022, at 5:55 AM, Christian via tcpdump-workers wrote: > hello out there, I created a kernel probe module and I want to watch the > outputs of that module with pcap/Wireshark or tcpdump... Just like > usbmon. My prefered tool is dumpcap. So I defined a char device

[tcpdump-workers] wireshark extension for a Kernel Module (like Usbmon)

2022-03-07 Thread Christian via tcpdump-workers
--- Begin Message --- hello out there, I created a kernel probe module and I want to watch the outputs of that module with pcap/Wireshark or tcpdump... Just like usbmon. My prefered tool is dumpcap. So I defined a char device in the dev-directory /dev/kpnode from which the pcap interface can read t