GitHub - iznan/nfqueue_recorder: Create a netfilter queue and display packets passing through. Can also save those packets to a pcap file.

iznan / nfqueue_recorder Public

forked from jvehent/nfqueue_recorder

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Create a netfilter queue and display packets passing through. Can also save those packets to a pcap file.

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
IPTABLES.README		IPTABLES.README
README		README
nfqueue_recorder.c		nfqueue_recorder.c

Repository files navigation

Launch the program as root, either with a destination pcap file or not, and send any ipv4 traffic that you want to it.

---------
$ gcc -g -Wall -o nfqueue_recorder nfqueue_recorder.c -lnfnetlink  -lnetfilter_queue -lpcap

$ sudo ./nfqueue_recorder -o todays-traffic.pcap

$ sudo iptables -I FORWARD -j NFQUEUE
---------

stdout will output the ip/tcp/udp headers in the console

dependencies:
 * libpcap-dev
 * libnetfilter-queue-dev

you can open the pcap file with tcpdump or wireshark:
---------
$ tcpdump -qns 0 -X -r todays-traffic.pcap
---------