class Sniffer
{
public:
Sniffer();
void processPacket(const u_char* instance, const pcap_pkthdr *pkthdr);
private:
char* dev;
char errbuff[PCAP_ERRBUF_SIZE];
pcap_t *handle;
struct pcap_pkthdr header;
struct bpf_program filtro;
bool match(const u_char* str1,int len
On Sat, Jun 4, 2011 at 2:38 PM, Adam Katz wrote:
> Hi, all!
>
> I'm trying to use tc to shape traffic sent using libpcap (actually
> tcpreplay, which is based on libpcap). I'm doing this for a research
> project.
>
> i have a simple prio scheduler with a default band 2:
>
> tc qdisc add dev eth0 r
Hi, all!
I'm trying to use tc to shape traffic sent using libpcap (actually
tcpreplay, which is based on libpcap). I'm doing this for a research
project.
i have a simple prio scheduler with a default band 2:
tc qdisc add dev eth0 root handle 1: prio priomap 2 2 2 2 2 2 2 2 2 2 2 2 2
2 2 2
with
On Jun 4, 2011, at 11:23 AM, Flavio Truzzi wrote:
> In the class header
How is it defined? I.e., what is the statement that defines it?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
In the class header
On Fri, Jun 3, 2011 at 11:41 PM, Guy Harris wrote:
>
> On Jun 3, 2011, at 4:18 PM, Flavio Truzzi wrote:
>
> >pcap_compile(handle,&filtro,filtroexp.c_str(),0,0);
>
> Where is filtro defined?
>
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to uns
Checked into the trunk and 1.2 branches.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
Checked into the trunk and 1.2 branches, with a change - ifrname points to a
location to which we copy an interface name, so it must be "char *", not "const
char *".-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
On Fri, Jun 3, 2011 at 9:49 PM, Darren Reed wrote:
> On 3/06/11 05:24 PM, Guy Harris wrote:
>>
>> On Jun 3, 2011, at 3:13 PM, Darren Reed wrote:
>>
>>
>>>
>>> Because for every packet that is appended you need to do:
>>> 1. open(2)
>>> 2. read(2)
>>> 3. seek(2)
>>> 4. write(2)
>>> 5. close(2)
>>>
> "Guy" == Guy Harris writes:
>> So, you'd like to have pcap_reopen() then?
Guy> What would pcap_reopen() do? Mark's new API has a reasonable
Guy> name given what it does:
Guy>1) it returns a pcap_dumper_t, not a pcap_t, so it
Guy> should have "dump" in its name
