Re: [tcpdump-workers] How to use "pcap" on a router ???

2006-04-05 Thread Ury Segal
Hi! I'd prefer calling "pcap_open_live()" twice, set the appropriate filters (which may be different), call "get_selectable_fd()" on each pcap_t, and then use select() to pick up packets from any interface that may have some ready. That way I don't have to deal with threads. However on some si

[tcpdump-workers] How to ensure *pcap* doesnt drop any packet(s)?

2006-04-05 Thread kashif
Dear, By specifying "cnt" a negative value in the following, we can forever capture packets. int pcap_loop(pcap_t *p, int cnt, pcap_handler callback, u_char *user) But if i want to capture packets for half an hour for example, do we have any such configuration? Moreover, when pcakets are captur

[tcpdump-workers] How to use "pcap" on a router ???

2006-04-05 Thread kashif
Dear, I have configured my PC running RedHat Linux 9.0 into a router by turning on the ip_forwarding facility of it. It got TWO LAN cards...and if i run two instances of *pcap* one for each LAN card for capturing packets, it works fineBut i intend writing an application wherein i need the info

[tcpdump-workers] simple pcap-trace manipulation tools

2006-04-05 Thread Willem de Bruijn
hi everyone, I've had to work with libpcap quite a bit in the last years, during which I found myself having to develop some tracefile-tools that might be of interest to others as well. I don't make a habit of spamming, but figured this was worth a single message to the list. In a nutshell: pc