linux-kernel - Re: ss: Checking efficient analysis for network connections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 2 Jun 2019 07:40:49 +0200
From:   Markus Elfring <Markus.Elfring@....de>
To:     David Miller <davem@...emloft.net>,
        David Ahern <dsahern@...il.com>,
        Stephen Hemminger <stephen@...workplumber.org>
Cc:     Josh Hunt <johunt@...mai.com>, netdev@...r.kernel.org,
        linux-kernel@...r.kernel.org
Subject: Re: ss: Checking efficient analysis for network connections

> If you use netlink operations directly,

Thanks for such feedback.

Should this programming interface become better known?

> you can have the kernel filter on various criteria
> and only get the socket entries you are interested in.

This is good to know.

> This whole discussion has zero to do with what text format 'ss' outputs.

Some software components are affected here.

The socket statistic tool is using data from the directory “/proc/net”.

* Provided text files refer to known Linux data formats.
  Can it happen to work with other data formats there?

* The analysis program can also be extended for the support
  of additional data formats, can't it?

Regards,
Markus