On Tue, Mar 29, 2005 at 02:51:46AM -0800, rajat swarup wrote: > I am doing an academic project in which I need to capture the network > packets off the wire. This capturing needs to be done in the kernel > itself as the other component of this project works in the kernel and > takes input from a data structure generated by this packet capturing > module. tcpdump and libpcap capture packets in userland. > I was looking through the kernel code and could not find specific > places where something like a "raw packet" could be found. > Should I capture the packets through the device driver module? > Or Could someone advise me as to where in the kernel I should look to > get access to the raw data packets? Netfilter should be able to help you with that. Erik -- Erik Mouw J.A.K.Mouw@xxxxxxxxxxxxxx mouw@xxxxxxxxxxxx
Attachment:
signature.asc
Description: Digital signature
