README.md

cleanpcap

Description :

  • Small tool to dump packets according to the originated PID.
  • This is heavily inspired by nethogs.
  • So everything should be put under GPLv2 (TODO)

Know Bugs :

  • IPv4 only
  • libpcap is not used to dump packet to file as it cannot "append" packet to existing pcaps
  • I am pretty sure the memory management is not there

Usage :

  • By default eth0 will be used with capture filter "ip" : sudo cleanpcap

  • Changing capture interface : sudo cleanpcap wlan0

  • Changing capture filter (Interface must be specified in that case) sudo cleanpcap eth0 "not port 53"

Requirements :

libpcap-dev or libpcap-devel (for packet sniffing only)

Quick note on Android

make -f Makefile.aarch64

-OR-

make -f Makefile.arm32

adb push cleanpcap /data/local/tmp/ adb shell su cd /sdcard /data/local/tmp/cleanpcap ```