Skip to main content

walk_arp_cache

Function walk_arp_cache 

Source
pub fn walk_arp_cache<P: PhysicalMemoryProvider>(
    reader: &ObjectReader<P>,
) -> Result<Vec<ArpEntryInfo>>
Expand description

Walk the kernel ARP neighbour table and extract all entries.

Reads the arp_tbl symbol (type neigh_table), dereferences the nht pointer to get the neigh_hash_table, then iterates hash buckets reading neighbour structs linked via next.