We're now a non-profit! Support open source packet analysis by making a donation.

Wireshark-dev: [Wireshark-dev] How to push packets into libpcap (Linux) ?

From: Ori Finkelman <orifinkelman@xxxxxxxxx>
Date: Thu, 18 Feb 2010 17:12:31 +0200
My Linux kernel module can sometimes drop packets on their way out (at the IP layer).
However, I would like to be able to catch these packets in wireshark even though I am dropping them.

Is there any way I can push an sk_buff directly into libpcap so I will get it into wireshark ?