Re: [tcpdump-workers] When will a packet filter be ignored/unused?

2010-03-17 Thread Guy Harris
On Mar 17, 2010, at 10:54 AM, Jim Lloyd wrote: > So, what does an error code of -3 indicate? #define PCAP_ERROR_NOT_ACTIVATED-3 /* the capture needs to be activated */ > I've done some experimentation and determined that apparently I must call > pcap_activate before callin

Re: [tcpdump-workers] When will a packet filter be ignored/unused?

2010-03-17 Thread Jim Lloyd
On Tue, Mar 16, 2010 at 4:40 PM, Jim Lloyd wrote: > I have a working application using libpcap that doesn't always filter as I > expect. The application is designed to sniff http traffic, so the filter can > be as simple as "tcp port 80". However, we allow sniffing multiple http > servers running