packet sniffers and kernel bypass -
is packet sniffer software implemented kernel bypass. if so, how (apis) done on linux , windows?
or packet sniffer depend on kernel talk nic , put promiscuous mode. if so, again apis lin linux , windows
does packet sniffer depend on kernel talk nic , put promiscuous mode
at least free-software packet sniffers, yes, does. (some commercial sniffers on windows might supply own drivers, @ least wi-fi adapters, , bypass networking stack adapters.)
if so, again apis lin linux , windows
linux: pf_packet sockets.
windows: there aren't nice apis, so, example, winpcap has provide its own kernel-mode driver uses ndis kernel interface.
or use libpcap on un*x (linux, *bsd, os x, aix, solaris, hp-ux, etc.) , winpcap on windows, , let use appropriate capture mechanism , programming interfaces on os you're using (take @ pcap-linux.c
in libpcap source - it's bit complicated use of linux apis, example).
Comments
Post a Comment