Ramsurrun Visham wrote:
But if I want to modify the packets in the normal flow, let's say
manipulate their mac address, how do I go abt it.
Not with libpcap - it has its own packet flow, separate from the normal
flow, and it cannot affect packets in the normal flow (i.e., in the
normal receive pa
>the normal flow of traffic is a separate path from the libpcap flow, and
>packets >get supplied to both of them.
>For example, if you run tcpdump, it doesn't shut off the TCP/IP
>>implementation on your machine; a *copy* of packets (in effect) is passed to
>>tcpdump to print or save, another
