Re: [tcpdump-workers] packets contents

2008-10-29 Thread Guy Harris
On Oct 29, 2008, at 8:49 AM, [EMAIL PROTECTED] wrote: Is there a pcap function that will allow me to view the ip addresses (sending and receiving) of a packet No. Libpcap doesn't interpret the packet contents; you will have to do the same thing that tcpdump, Wireshark, Snort, etc. do, and

[tcpdump-workers] packets contents

2008-10-29 Thread stephen
I'm working with some C code using pcap.h and I have an infinite loop running pcap_dispatch. The packet handler function then takes the packet header it received from pcap_dispatch and sends a message to a synthesizer currently based on the packet length which is stored in the packet header it