search

david415 / HoneyBadger

Quantum Insert detector/recorder
GNU General Public License v3.0
305 stars 39 forks source link

add AF_PACKET support #57

Closed david415 closed 9 years ago

david415 commented 9 years ago

The plan is to have several Data AcQuisition methods for HoneyBadger... AF_PACKET included among them.

david415 commented 9 years ago

it works! fixed in this dev branch https://github.com/david415/HoneyBadger/tree/57-add-afpacket-daq-1

david415 commented 9 years ago

If I merge this into master then users of none-Linux operating systems will not be able to build honeybadger... then again those other platforms might not have the "correct" version of libpcap (libpcap doesn't even have proper version releases ;-p)

david415 commented 9 years ago

...These changes were not thoroughly tested. The pcap-driven integration tests all passed however I noticed some funny business when I was playing around with honeybadger and netcat. Therefore I'm reverting several prior commits... and we can try again with AF_PACKET in a dev branch.

david415 commented 9 years ago

ok... besides the runny business with using AF_PACKET with loopback interfaces and interfaces which do not have segment offloading disabled... this feature works otherwise excellently!... although it should be an optional compile/import... so that non-Linux users can build without hacking the source code.