[lkml]   [2011]   [Oct]   [18]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: kenel level packet capturing

    You would probably have more/better replies if you asked netdev <>.

    On Tue, 18 October 2011 raviraj joshi <> wrote:
    > We are making a kernel level packet capture module as a part of our BE project .
    > We are finding it difficult to understand kenel networking code.
    > We studied structures and functions like sk_buff, netif_rx(),dev_alloc_skb.
    > How ever we were not able to trace the actual path a simple packet follows.
    > Moreover we tried to count the no of times netif_rx function was
    > called it was much much lower than amount of packets actually being
    > received.

    netif_rx may fetch more than a single packet from the network interface
    controller in order to improve performance.

    > Can anyone please let us know the reason for this and how to approach
    > the problem of writing a kernel level packet capture module.

    The better place to capture packets is probably by hooking somewhere into
    netfilter code as all packets traverse it (assuming it is loaded/enabled).


    > regards,
    > Raviraj Joshi
    > PICT,Pune.

     \ /
      Last update: 2011-10-18 22:53    [W:0.020 / U:2.960 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site