And on another good news, got some sign of life from a #tcpdump / #libpcap maintainer. Hopefully the @batadv dissector for libpcap will be merged eventually... It's been more than 4 years already with only eventual feedback from upstream... This would really help with debugging network issues, especially on #embedded devices, and capturing only the data you need with minimal performance overhead.

Also: My pull-request for #tcpdump / #libpcap to add #batman_adv support to it is now four years old. "Happy" birthday! :loading: ...
https://github.com/the-tcpdump-group/libpcap/pull/980

I’ve posted the simple example in #go, #libpcap #pcap

https://aohorodnyk.com/post/2024-08-31-golang-traffic-capturer/

Updated my patch for #tcpdump / #libpcap to add #batman_adv support. The patch is nearing 3 years of getting no full review... and I have no clue why that is.

This patch allows to filter for specific batman-adv packet types. And allows to filter within a packets payload by adjusting offsets, like "tcpdump ... 'batadv 15 bcast and arp' ". Very handy for debugging, especially on devices with limited resources, as libpcap uses #BPF on #Linux.

https://github.com/the-tcpdump-group/libpcap/pull/980

#mesh #meshnetwork #BATMAN

finally got around to write a PoC for a #rust-based #libpcap analysis/interceptor tool. But since https://crates.io/crates/pcap uses unsafe rust to wrap around the native libpcap library, there's no way to build the binary statically, right? The target system on which the binary shall be executed on must provide the libpcap.so?

I also used https://www.tcpdump.org/linktypes.html as reference fyi

The cat is not really helping my debugging efforts (#c #strace #gdb #libpcap #wineoclock )

Benutzt hier jemand #bettercap und hat jemand das mit irgendeinem halbwegs aktuellem #libpcap (d.h. >0.8.*) am laufen?