search

kpcyrd / sniffglue

Secure multithreaded packet sniffer
https://crates.io/crates/sniffglue
GNU General Public License v3.0
1.08k stars 94 forks source link

ppp support #95

Closed felixonmars closed 2 years ago

felixonmars commented 2 years ago

Seems like ppp interfaces are not supported now:

$ sniffglue ppp0
Listening on device: "ppp0", verbosity 0/4
Error: Unknown link type: 113
kpcyrd commented 2 years ago

hi!

the link type can be added here: https://github.com/kpcyrd/sniffglue/blob/main/src/link.rs

If ppp emits plain ethernet frames it can be added relatively easily here: https://github.com/kpcyrd/sniffglue/blob/7c2c376d815337680d9588269751244f89456360/src/centrifuge/mod.rs#L26-L37

If you have either instructions on how to easily create a ppp device to test with, or a pcap file, that'd be very useful for implementing support. :)

Thanks!

felixonmars commented 2 years ago

ppp0.pcap.gz

I'm not familiar with the internals either, hope this pcap file helps :)