Latest commit c9f00f1 7 years ago
README.md

cleanpcap

Description :

Small tool to dump packets according to the originated PID. This is heavily inspired by nethogs. So everything should be put under GPLv3 (TODO)

Know Bugs :

  • IPv4 only
  • libpcap is not used to dump packet to file as it cannot "append" packet to existing pcaps
  • I am pretty sure the memory management is not there

Usage :

  • By default eth0 will be used with capture filter "ip" : sudo cleanpcap

  • Changin capture interface : sudo cleanpcap wlan0

  • Changing capture filter (Interface must be specified in that case) sudo cleanpcap eth0 "not port 53"

Requirements :

libpcap-dev or libpcap-devel (for packet sniffing only)