sngrep
sngrep copied to clipboard
Allow set capture device to none
When capturing HEP packets usually its prefarable to disable listen on interface as you may get duplicate dialogs.
Currently there no way to set interface to none
, only workaround set capture to loopback or read empty pcap
On second though I think we should disable interface capture when HEP capture is enabled, to avoid false reports of double capture. As in most cases its not needed, but for these who need provide option to force capture on interface with HEP enabled
Hi !
You mean when HEP is enabled in Listening mode, don't you?
If we implement the capture interface none
it can be set as default in your sngreprc file (set capture.device none) so you can specify a capture interface whenever you want using -d
command line option.
Yeah I was talking about HEP listening mode.
none
interface type is good solution but I merely suggest it to set to none
if HEP enabled unless otherwise specified via command line or .sngreprc to avoid duplicates
This would be a great feature to have, as would it also allow you to run sngrep as non-root user as long as the HEP listen port was > 1024?