The netfilter framework shld be of help to you, using it you can capture packets in the kernel at various stages in IP(like pre routing, post routing) etc ... and can divert them to user space if you wish to.
Read more about it on www.netfilter.org
hth
Amit
"Aggarwal, Vikas (OFT)" <Vikas.Aggarwal@xxxxxxxxxxxxxxx> wrote:
"Aggarwal, Vikas (OFT)" <Vikas.Aggarwal@xxxxxxxxxxxxxxx> wrote:
May be check the source code for ethereal
http://www.ethereal.com/download.html
-----Original Message-----
From: kernelnewbies-bounce@xxxxxxxxxxxx
[mailto:kernelnewbies-bounce@xxxxxxxxxxxx] On Behalf Of rajat swarup
Sent: Tuesday, March 29, 2005 5:52 AM
To: kernelnewbies@xxxxxxxxxxxx
Subject: Raw network packets in kernel
Hi,
I am doing an academic project in which I need to capture the network
packets off the wire. This capturing needs to be done in the kernel
itself as the other component of this project works in the kernel and
takes input from a data structure generated by this packet capturing
module.
I was looking through the kernel code and could not find specific
places where something like a "raw packet" could be found.
Should I capture the packets through the device driver module?
Or Could someone advise me as to where in the kernel I should look to
get access to the raw data packets?
Thanks,
Rajat Swarup.
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive: http://mail.nl.linux.org/kernelnewbies/
FAQ: http://kernelnewbies.org/faq/
--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive: http://mail.nl.linux.org/kernelnewbies/
FAQ: http://kernelnewbies.org/faq/
Do you Yahoo!?
Yahoo! Small Business - Try our new resources site!
