You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The compiled binary executable for bisturi will attempt to create a new raw socket and bind it to a network interface using syscalls.
7
7
This will fail unless the program is run with root privileges, which is not advisable.
8
8
9
9
You can use [setcap](https://man7.org/linux/man-pages/man8/setcap.8.html) to grant the binary executable *only* the capability to operate on raw sockets.
10
10
This is the default behaviour of the included Makefile's **build** command.
11
+
12
+
13
+
## Usage
14
+
15
+
You can build the binary executable with the `make build` command.
16
+
17
+
The following flags are available to customize bisturi's behaviour:
18
+
19
+
| Flag | Type | Default | Meaning
20
+
| :---:|:--:|:--:|:--|
21
+
| i | string | eth0 | network interface for which the packets will be analyzed |
22
+
| p | string | all | protocl filter - 'all' equals to no filter |
23
+
24
+
Running bisturi with the provided `make run` command is functionally equivalent to running bisturi with the following flags, which are its defaults:
0 commit comments