undefined | Better HN

0 pointsGyulyVGC3y ago0 comments

For the moment, upper protocols are determined just by looking at the port numbers, so it is likely that the protocols you mentioned would be shown as "Other". I know this is not the best method to determine app protocols, but otherwise it would have been too complex to detect specific layer 7 protocols.

0 comments

LinuxBender3y ago

Makes sense. I am not a proper developer so I can not comment how difficult it would be to add that level of dissection in Rust. Here [1] is a page that describes how to utilize libpcap but I have no idea if that would be helpful or how difficult it would be to port this to Rust.

[1] - https://www.tcpdump.org/pcap.html

j / k navigate · click thread line to collapse

0 pointsGyulyVGC3y ago0 comments

0 comments

LinuxBender3y ago

[1] - https://www.tcpdump.org/pcap.html

j / k navigate · click thread line to collapse