Re: [tcpdump-workers] Multiple interface capture and thread safety

2012-05-11 Thread Rick Jones
On 05/11/2012 06:26 AM, Wiener Schnitzel wrote: I see. As I said, I might need to merge the data coming from the interfaces, so I need an algorithm to compare the age of packets with different sources. I don't think you will be able to arrive at that goal with perfect accuracy. Can it be like

Re: [tcpdump-workers] Multiple interface capture and thread safety

2012-05-11 Thread Wiener Schnitzel
On 11.05.2012 09:02, Guy Harris wrote: On May 10, 2012, at 7:43 AM, Wiener Schnitzel wrote: I need to perform packet sniffing on several interfaces at the same time. Are you processing packets from each interface independently, so that a packet on interface A is not looked at when processing

Re: [tcpdump-workers] Multiple interface capture and thread safety status in libpcap

2012-05-11 Thread Guy Harris
On May 10, 2012, at 7:43 AM, Wiener Schnitzel wrote: > I need to perform packet sniffing on several interfaces at the same time. Are you processing packets from each interface independently, so that a packet on interface A is not looked at when processing packets from interface B, or are you p

Re: [tcpdump-workers] Multiple interface capture and thread safety

2012-05-10 Thread David Laight
> As I have to deal with asymm. paths and perform flow analysis, I must > ensure that the packets of a flow are analyzed in temporal order, no > matter from which interface they came through. You'll probably only manage that if the underlying low level device driver (or preferably the hardware

Re: [tcpdump-workers] Multiple interface capture and thread safety

2012-05-10 Thread Wiener Schnitzel
On 10.05.2012 16:59, ri...@happyleptic.org wrote: -[ Thu, May 10, 2012 at 04:43:50PM +0200, Wiener Schnitzel ] I need to perform packet sniffing on several interfaces at the same time. My natural approach would be to open a pcap_t object for each interface and place a "select" - considering

Re: [tcpdump-workers] Multiple interface capture and thread safety

2012-05-10 Thread rixed
-[ Thu, May 10, 2012 at 04:43:50PM +0200, Wiener Schnitzel ] > I need to perform packet sniffing on several interfaces at the same > time. > My natural approach would be to open a pcap_t object for each > interface and place a "select" - considering Linux -call to deal > with packet dispatching

[tcpdump-workers] Multiple interface capture and thread safety status in libpcap

2012-05-10 Thread Wiener Schnitzel
Hi all, I need to perform packet sniffing on several interfaces at the same time. My natural approach would be to open a pcap_t object for each interface and place a "select" - considering Linux -call to deal with packet dispatching. My only constraint is that I have to treat the received pac