Hi.

Low level does not necessary mean "more powerful". One example is the bpf
compiler, which is shipped only with the pcap API. Moreover, the APIs to
receive packets are much more simple in the pcap API.

the packet api was created in order to have a windows indepedent interface
between wpcap.dll (the pcap API), which is independent on the windows
flavor, and the kernel driver, which is different for NT4, 2k/XP and 9x.

I strongly suggest yuou to download the new winpcap 3.0 alpha, and the
developer's pack, which is shipped with some new, very detailed
documentation (in particular, look at pcap_findalldevs() to obtain a list of
adapters, and pcap_read_ex() to receive packets in a quite elegant manner).

GV


----- Original Message -----
From: "??? Chanjun Yu" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, August 09, 2002 7:24 AM
Subject: RE: [WinPcap-users] How to set filter with packet.dll


Really? pcap is more powerful than packet32?

WinPcap said that packet32 is a low level driver , so I think it is more
powerful than pcap.

Do you agree?

-----Original Message-----
From: Gianluca Varenni [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 09, 2002 1:17 PM
To: [EMAIL PROTECTED]
Subject: Re: [WinPcap-users] How to set filter with packet.dll


Hi.

Why don't you use the pcap API?
It is much more powerful, and platform independent.
Using thw pcap api, you have a filter compiler to generate bpf code.


BTW the BPF code is a pseudo assembly, which is quite hard to create by
hand, because it is link layer specific, you need to know all the details of
protocol headers, and so on.

GV


----- Original Message -----
From: "??? Chanjun Yu" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, August 09, 2002 3:36 AM
Subject: [WinPcap-users] How to set filter with packet.dll


My question is how to set a filter. (Only use packet32.h)

PacketSetBpf(lpAdapter, bpf_program *filter)
The second parameter is hard to set because there is no function like
pcap_compile in packet32.










Reply via email to