Guy, > J. Thomsen wrote: > > > Is there a way to clear the receive buffer > > for packets that are captured before one > > sets bpf filters ? > > If there is any version of libpcap/WinPcap where setting the filter > doesn't discard all previously-received packets, I'd consider that a bug > - BPF on the BSDs clears the buffer when you set the filter and, on > Linux, recent versions of libpcap go through some effort to discard the > previous packets. If the WinPcap driver doesn't clear the buffer when > the filter is set, perhaps it should be changed to do so. >
The winPcap driver, of course, clears the buffers after setting a new filter in the BIOCSETF ioctl. Unless some macroscopic bug in the implementation of this ioctl, which I suspect would be already reported by a lot of windump and ethereal users, a WinPcap-based program that follows the standard open/apply filter/capture cycle shouldn't see garbage packets. Loris ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
