bpf is a packet filter -which can be used to snoop on all packets at the interface at the link level. You would have to create a socket to do I/O, but the snooper can mess around with the existing connection.
regards -kamal --- DJF <[EMAIL PROTECTED]> wrote: > Hi everybody, > > I've recently been looking into raw socket > programming. However there's still a question that > remains. Maybe it's just a case of RTFM, if so point > me to a good manual on the topic. > The man pages indicate that you can do read and > write operations with rawsock aswell as bpf. > However, in all of the source codes I found, a raw > socket was used to write to, and bpf was used to > read from the interface. > > What's the advantage in using the rawsock bpf > combination instead of > bpf (or raw socket) only? > > Thx in advance, > dave > > -- > Encrypt your emails! My PGPkeyID: 0xA37C182D > _ > ( ) ASCII Ribbon Campaign against > X HTML mail and news > / \ > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
