Re: [tcpdump-workers] Where does libpcap get the incoming network

Hi Fabian, thanks for the link to your thesis. That's a well-put together and very informative document. I specially liked figure 2.2 (conceptual diagram of the Linux Socket Filter for incoming packets). In that figure, I see that any packet arriving at the "packet_input_queue" is sent towar

[tcpdump-workers] Where does libpcap get the incoming network data? From the driver?

Hi, Two quick questions: 1. Does libpcap obtain incoming packet data from the nic's driver or from somewhere else? 2. Does libpcap obtain outgoing packet data from the linux IP layer or from somewhere else? thanks! - This is the tcpdump-workers list.