Re: PCAP Open BPF R/W?

Jason Slagle wrote this message on Sat, Oct 25, 2003 at 11:58 -0400: > Could someone consider applying the following to the in tree pcap? It > makes it possible to write to the pcap fd to send packets out the > interface. Some simulators expect this ability to properly do > netwo

PCAP Open BPF R/W?

Could someone consider applying the following to the in tree pcap? It makes it possible to write to the pcap fd to send packets out the interface. Some simulators expect this ability to properly do networking.. Jason --- pcap-bpf.c.old Sat Oct 25 11:56:32 2003 +++ pcap-bpf.c Sat Oct 25

Re: Question about BPF API (PCAP not like for me)

Vladimir Yu. Stepanov wrote: Hello ! I have a little question about BPF: how to determine incoming or outgoing packet given into the user level mode. Current API do not supported this or I are wrong ? Unfortunately, there is no way of determining this fact. However, there is a flag names BIOC

Question about BPF API (PCAP not like for me)

Hello ! I have a little question about BPF: how to determine incoming or outgoing packet given into the user level mode. Current API do not supported this or I are wrong ? Thanks. -- Vladimir Yu. Stepanov E-Mail: [EMAIL PROTECTED] Phone: +7 (845) 2450450 To Unsubscribe: send mail to [EM

snoop - pcap-snoop - packetshell

Dear Lists 1.I want to know if there is any snoop TCP Source Code for 4.4FreeBSD? 2.Tell me if pcap-snoop.c is the snoop-tcp tool. 3.Tell me if there is any support for packetshell on FreeBSD. THANX _ Protect your PC - get

Re: Pcap

Hi Have You any sample ? and i want to know how the packet is writen on pcap buffer and how they will forward ? if they are forwarded after the saving or they will never be forwarded ? i mean that is this scenario true ? or not packet > ip_input -copy of packet---> wri

Re: pcap/bpf in a multi-threaded environment

On Fri, Nov 09, 2001 at 10:56:30AM -0600, Guy Helmer wrote: > The problem is probably due to the poll system call that the threaded > library does before performing the read(). In the non-threaded case, the > read() returns when the timeout is hit; in the threaded case, the threaded > library's p

RE: pcap/bpf in a multi-threaded environment

tigation (with my limited knowledge of what > happens between a call to read() and when it ends up in bpfread()) > and saw the difference between a call with and without the -pthreads > option: > > in /usr/src/contrib/libpcap/pcap-bpf.c, line 81, the function pcap_read(): >

pcap/bpf in a multi-threaded environment

difference between a call with and without the -pthreads option: in /usr/src/contrib/libpcap/pcap-bpf.c, line 81, the function pcap_read(): cc = read(p->fd, (char *)p->buffer, p->bufsize); at a certain moment, in the read()-code, bpfread() is called: /sys/net/bpf.c, line 491