Open TsXor opened 1 year ago
gsudo socketdump.exe "ip or ipv6" gsudo socketdump.exe "not ip and not ipv6" gsudo socketdump.exe "ip" gsudo socketdump.exe "ipv6"
fails to show socket events
gsudo socketdump.exe "not ip or not ipv6" gsudo socketdump.exe "not ip" gsudo socketdump.exe "not ipv6"
can show socket events
It seems that ip and ipv6 are broken for the SOCKET layer. The problem seems to be here, where the filter determines whether ip/ipv6 holds based on whether there is a IP(v6) header or not, but this only makes sense for the NETWORK layer.
ip
ipv6
SOCKET
NETWORK
fails to show socket events
can show socket events