Hi Prateek yes you can capture from a wifi interface, in order to filter L7 packets you need nDPI, PF_RING is just a packet capture framework with some basic (not L7) filtering capabilities. You can compile nDPI on mips.
Alfredo > On 04 Nov 2015, at 08:35, PRATEEK MOHANTY <[email protected]> > wrote: > > Hi Alfredo, > > Thanks for reply. I have few doubts, please help me to clear it. > > 1. Can I use PF_RING for per wifi VAPs ? > 2. Can I filter packets based on host strings like facebook,youtube and drop > those packets ? If yes, how? > 3. How nDPI and PF_RING are different ? > 4. Can I use nDPI for wifi vap interfaces with mips processor ? > > regards > Prateek > > On Wednesday 04 November 2015 12:34 PM, Alfredo Cardigliano wrote: >> Hi Prateek >> 1. bpf filters: see documentation for pfring_set_bpf_filter in doxygen and >> pfcount -f as example >> 2. hash filters: see documentation for pfring_handle_hash_filtering_rule in >> doxygen and pfcount -u 1 as example >> 3. wildcard filters: see documentation for pfring_add_filtering_rule in >> doxygen and pfcount -u 2 as example >> >> Alfredo >> >>> On 04 Nov 2015, at 07:39, PRATEEK MOHANTY >>> <[email protected]> wrote: >>> >>> Hi Team, >>> >>> I am new to PF_RING, need to understand the filtering technique in it. >>> Please give some examples for using BPF filters and HASH/WILDCARD filters. >>> Any document would help. >>> >>> thanks >>> Prateek >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
