search

GyulyVGC / sniffnet

Comfortably monitor your Internet traffic 🕵️‍♂️
https://sniffnet.net
Apache License 2.0
17.94k stars 548 forks source link

Add support for additional link types (e.g., `LINUX_SLL`) #422

Open GyulyVGC opened 9 months ago

GyulyVGC commented 9 months ago

Until v1.2.2, Sniffnet only supported parsing Ethernet packets.

With #421 support for interfaces based on raw IP and null/loopback was added to Sniffnet, covering the vast majority of possible use cases and scenarios.

This issue is intended to track the necessity to add support for even more link types.

The most important scenario that's still unsupported is, for example, parsing packets from the any interface on Linux, since this particular interface is based on a peculiar link type (known as LINUX_SLL or Linux cooked) that adds to packets a special header.

A full list of link types is available here.

Originally posted by @GyulyVGC in https://github.com/GyulyVGC/sniffnet/issues/30#issuecomment-1873396831

scottopell commented 8 months ago

Ran across this while trying to find out how to parse SLL packets from a pcap file and just wanted to point out for future searchers that this is about "sll" link type, not "ssl" link type.

Ref: https://wiki.wireshark.org/SLL.md

GyulyVGC commented 8 months ago

Ran across this while trying to find out how to parse SLL packets from a pcap file and just wanted to point out for future searchers that this is about "sll" link type, not "ssl" link type.

Ref: https://wiki.wireshark.org/SLL.md

You are totally right @scottopell Thank you very much for the correction, I just fixed it 👍