This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is it normal to have nflog and nfqueue in my interfaces list? It's an ubuntu desktop system running ufw. I don`t remember having those interfaces when i first installed wireshark.

asked 16 Oct '15, 12:23

Ciohap22's gravatar image

Ciohap22
11226
accept rate: 0%

edited 16 Oct '15, 13:37

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


Is it normal to have nflog and nfqueue in my interfaces list?

On Linux, with a sufficiently recent version of libpcap, yes, it's normal. People wanted to be able to capture some forms of netfilter traffic and analyze it with tcpdump, Wireshark, etc., so that capability was added to libpcap.

permanent link

answered 16 Oct '15, 13:37

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

So those are 2 interfaces created by wireshark when it was installed?

(17 Oct '15, 01:01) Ciohap22
1

No. Wireshark doesn't create interfaces. Wireshark uses libpcap to do traffic capture; libpcap doesn't create interfaces, either, it just allows capturing on things that aren't regular network interfaces, such as the nflog and nfqueue hooks into the Linux netfilter mechanism.

(17 Oct '15, 11:03) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×2
×1

question asked: 16 Oct '15, 12:23

question was seen: 2,939 times

last updated: 17 Oct '15, 13:03

Related questions

p​o​w​e​r​e​d by O​S​Q​A