Searching for packet capture file

sh11 · September 22, 2021, 8:31am

I want to find the main file or package that responsible for packet capture that entered the router like raw socket or pcap, so What is the location of this file in source code of openwrt ?

trendy · September 22, 2021, 9:19am

sh11 · September 22, 2021, 9:32am

Brother can you explain to me more about tcpdump most important functions ?

tmomas · September 22, 2021, 9:49am

See https://www.tcpdump.org/manpages/tcpdump.1.html

trendy · September 22, 2021, 9:50am

I also like this tutorial.

sh11 · September 22, 2021, 9:55am

Thanks brothers.

tmomas · September 22, 2021, 9:56am

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.

sh11 · September 22, 2021, 11:48am

brother another question, Do you know which files responsible for nating and forwarding ?

trendy · September 22, 2021, 11:51am

This is very generic. iptables are used for nat. Forwarding is part of the OS.

sh11 · September 22, 2021, 11:52am

Can you tell me the location of these files in source code ?

trendy · September 22, 2021, 12:01pm

github.com

openwrt/openwrt/blob/master/package/base-files/files/etc/sysctl.d/10-default.conf

# Do not edit, changes to this file will be lost on upgrades
# /etc/sysctl.conf can be used to customize sysctl settings

kernel.panic=3
kernel.core_pattern=/tmp/%e.%t.%p.%s.core
fs.suid_dumpable=2

fs.protected_hardlinks=1
fs.protected_symlinks=1

net.core.bpf_jit_enable=1

net.ipv4.conf.default.arp_ignore=1
net.ipv4.conf.all.arp_ignore=1
net.ipv4.ip_forward=1
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.icmp_ignore_bogus_error_responses=1
net.ipv4.igmp_max_memberships=100
net.ipv4.tcp_fin_timeout=30
net.ipv4.tcp_keepalive_time=120

This file has been truncated. show original

frollic · September 22, 2021, 12:02pm

You've already received an answer to the question once before, I'm sure the files haven't moved since then