Re: [tcpdump-workers] inject & read from the same interface

2011-03-02 Thread Guy Harris
On Mar 2, 2011, at 2:49 AM, Tobias C Rittweiler wrote: > Is this expected behavior? The only thing I'd expect in this case is whatever the particular mechanism atop which libpcap runs on a particular OS does; that may well differ from OS to OS. > I'm also interested what in pcap-linux.c makes

[tcpdump-workers] inject & read from the same interface

2011-03-02 Thread Tobias C Rittweiler
Hi there! It seems to me that if I inject a packet P to a pcap handle H of an interface I, the next read (by pcap_next() etc.) will /not/ return P. However, if I have two handles H1 and H2 of the same interface I, and I inject P into H1, a read from H2 /will/ return that injected packet P. Is th