Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Add support for additional link types (e.g., LINUX_SLL) #422

Open
GyulyVGC opened this issue Jan 1, 2024 · 2 comments
Open

Add support for additional link types (e.g., LINUX_SLL) #422

GyulyVGC opened this issue Jan 1, 2024 · 2 comments
Labels
enhancement New feature, request, or improvement Linux Something related to Linux operating system

Comments

@GyulyVGC
Copy link
Owner

GyulyVGC commented Jan 1, 2024

Until v1.2.2, Sniffnet only supported parsing Ethernet packets.

With #421 support for interfaces based on raw IP and null/loopback was added to Sniffnet, covering the vast majority of possible use cases and scenarios.

This issue is intended to track the necessity to add support for even more link types.

The most important scenario that's still unsupported is, for example, parsing packets from the any interface on Linux, since this particular interface is based on a peculiar link type (known as LINUX_SLL or Linux cooked) that adds to packets a special header.

A full list of link types is available here.

Originally posted by @GyulyVGC in #30 (comment)

@GyulyVGC GyulyVGC added enhancement New feature, request, or improvement Linux Something related to Linux operating system labels Jan 1, 2024
@scottopell
Copy link

Ran across this while trying to find out how to parse SLL packets from a pcap file and just wanted to point out for future searchers that this is about "sll" link type, not "ssl" link type.

Ref: https://wiki.wireshark.org/SLL.md

@GyulyVGC GyulyVGC changed the title Add support for additional link types (e.g., LINUX_SSL) Add support for additional link types (e.g., LINUX_SLL) Jan 12, 2024
@GyulyVGC
Copy link
Owner Author

Ran across this while trying to find out how to parse SLL packets from a pcap file and just wanted to point out for future searchers that this is about "sll" link type, not "ssl" link type.

Ref: https://wiki.wireshark.org/SLL.md

You are totally right @scottopell
Thank you very much for the correction, I just fixed it 👍

@GyulyVGC GyulyVGC added help wanted Extra attention is needed and removed Linux Something related to Linux operating system labels Apr 5, 2024
@GyulyVGC GyulyVGC added Linux Something related to Linux operating system and removed help wanted Extra attention is needed labels May 27, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
enhancement New feature, request, or improvement Linux Something related to Linux operating system
Projects
None yet
Development

No branches or pull requests

2 participants