soheil soheil wrote:
I want to do packet capturing but as you know the pcap let the packet go out and just put a copy on the buffer . I just want to do a copy and don't let them go out .
Sounds like you should be using a divert socket, and not a bpf.
Lars -- Lars Eggert <[EMAIL PROTECTED]> USC Information Sciences Institute
smime.p7s
Description: S/MIME Cryptographic Signature