Skip to contentSkip to conversation

AF_PACKET meets AF_UNIX

DISCUSSION Sebastian Krahmer 1 participant 1 message Jun 8, 2010

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

Hi

I made a small fix for 2.6.34 to have something like "tcpdump -i unix". For debugging purposes (DBUS etc) it would be really helpfull. The sockaddr_ll struct contains the socket's ino and the senders PID in ifindex, so all necessary infos can be found out via /proc/net/unix in userland.

The patch goes here: http://www.suse.de/~krahmer/unix-monitor-2.6.34.tgz

If you dont like any constructions in it please let me know, so I can fix it and it can be accepted upstream :)

cya,
Sebastian

Signature · 5 lines
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ [email protected] - SuSE Security Team
~ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)