My OS is Linux, and I would like to understand via netlink messages when Wireshark is active on an interface. Do you know what happens when Wireshark is activated and what kind of netlink messages does the kernel send to alert applications? Thank you